I'm trying to understand IIS 8.5 user account model.
IUSR: default anonymous user (can be changed). it is the identity which request the web resource
ApplicationPoolIdentity: a special identity used for app pools
IIS_IUSRS: it is a group where all special ApplicationPoolIdentity are in
IIS_IUSRS has read/execute permission on wwwroot folder
I don't get why IUSR does not have any permission on wwwroot folder
How could any web request not result in a 401???