Win 2003 server: - IIS_WPG group needs read&excecute on the whole structure, plus modify on web.config, the upload directory, and one folder I can't remember the name of under the Util directory if you are going to use the import function. - ASP.NET Machine acount needs read&excecute on the whole structure. - If you're using windows authentication, the correct groups need appropiate rights, and you need to set this in web.config too. Win XP: - ASP.NET Machine account needs read&execute on the whole structure, and modify on the same directories as iis_wpg above - I also have read&execute on the users: IUSR_MACHINENAME, Web Anonymous users and Web applications, but I'm not sure that's necessary... I think that's enough, but it would be nice if someone could confirm this :)

Check out whitepaper http://www.episerver.com/downloads/Documents/WhitePapers/English/EPiServer%204.50/EPiServer%20Operators%20Guide.pdf

Thanks!