I have a Windows Server that is a member server of an AD domain.
On it there is an IIS web site with Physical Path set to
The site's Application Pool is set to a .NET CLR Version v4.0.30319 one with Integrated pipeline mode and running under the identity
Under the web site's IIS Authentication, I have Windows Authentication set to Enabled.
I want to allow all authenticated users, either domain or with local server credentials, to access the web site. What are the security settings I must have for the
IIS_IUSRS has Read, Read & Execute and List folder contents permissions. And all authenticated users appear to be able to access the web site without problems.
But when I remove
IIS_IUSRS from the ACL, no user can access because web.config couldn't be read. Why is this the case? Where in the web site configuration is
IIS_IUSRS specified? And anyway, my
IIS_IUSRS currently has no members.