DotNetNuke websites need a number of permissions to operate. The set of permissions to run is lower (typically read permissions) than the set to install, upgrade or add extensions (typically read, write and modify). As a number of core actions can require update permissions e.g. changing rewrite rules etc., it is common to grant read, write and execute permissions at the start and retain these permissions.

Whilst all folders require read permissions, only certain (bin, root folder, app_code, desktopmodules, portals) require write & modify. However it is again common to grant the set of permissions in the root folder and for all files and subfolders.

OS Version permissions

Depending on which version of a Microsoft operating system and it's associated version of Internet information server (IIS), the user that asp.net processes execute under is different. Please see the list below for the correct account

• If using Windows XP Professional - IIS5.1 this is the {Server}\ASPNET User Account. Note: Windows XP can be configured to run using simple security. By default it is turned off in Windows XP Professional when it joins a domain, but if running standalone you will need to disable it to access the more detailed file sharing dialog. See http://duxcw.com/faq/win/xp/simpshare.htm for more details.
  

• If using Windows 2003 (IIS6), Windows Vista (IIS7) or Windows 2008 (IIS7) this is the NT AUTHORITY\NETWORK SERVICE User Account.
  

• If using Windows 2008 R2 (IIS 7.5) or Windows 7 (IIS7.5) this is the IIS AppPool\DefaultAppPool User Account. Note: both these versions support cross application pool isolation, please read this for further details.