Say you have a “logs” directory inside the folder for your website, and you want to grant permissions so that your .NET code can write to that folder, e.g. with log4net or the Enterprise Library Logging application block. You can, of course, grant permissions to “Users”, or “NETWORK SERVICE”, but it all feels a bit spolly.
You can instead grant permissions to the IIS App Pool. This is apparently possible in Windows 2003, but it requires command-line-fu. In Windows 2008 & onwards, it’s easy:
Yep – that’s three “P”s. Make sure you have the local machine selected as the location, and not the domain, and Bob’s your Monkhouse.