Which user actually needs access to the directory from which a website is hosted for the IIS? The IUSR or IIS_IUSRS? Actually it is quite simple...