title: What are the least permissions required for an Application Pool in IIS to serve static files?
body: <p>I am having trouble with IIS serving up static files (.html, images, CSS, etc). I first encountered the <a href="http://social.msdn.microsoft.com/Forums/vstudio/en-US/2bd833ab-533c-4a4a-b2c4-6caf30c8609b/team-foundation-server-website-not-serving-static-files-properly" rel="nofollow noreferrer">problem with TFS</a>, and after trying lots of different things with no success, I am now trying to figure out the cause by creating a simple site with one HTML file and seeing if I can browse it.</p>
  
  <p>The server is running Windows Server 2012, IIS 8.0 and TFS 2012. I have created a local user account called <em>testweb</em> and an application pool called <em>My new TFS App Pool</em>.</p>
  
  <p><img src="https://i.stack.imgur.com/xeoLL.png" alt="IIS Application Pools"></p>
  
  <p><em>testweb</em> has been added to the <strong>IIS_IUSRS</strong> group. The App Pool has been set to <strong>No Managed Code</strong>.</p>
  
  <p>I've created an application called <em>test</em> under the <em>Default Web Site</em> and set it to use the new App Pool. It contains a single file called <em>index.html</em>.</p>
  
  <p><img src="https://i.stack.imgur.com/3YwAS.png" alt="IIS Application"></p>
  
  <p>When I try to browse the HTML page (which is just a simple Hello World page), it fails with the following HTTP Error 500 Internal Server Error:</p>
  
  <p><img src="https://i.stack.imgur.com/bZ7QF.png" alt="IIS Error"></p>
  
  <p>I have also tried adding <em>testweb</em> to the local <em>Administrators</em> group to no avail. If I change the App Pool identity to use my own personal domain account, the page will render fine.</p>
  
  <p>What changes do I need to make to the <em>testweb</em> account so that it will function properly as an App Pool identity?</p>