In IIS on Windows Server 2016 and later versions, a built-in account named `IUSR` is used as the default identity that is used by the web server when Anonymous Authentication is enabled. This account replaces the `IUSR_MachineName` account from earlier versions of IIS that ship with Windows Server 2003. Additionally, a group that is named `IIS_IUSRS` is used as a container for all [application pool identities](/iis/manage/configuring-security/application-pool-identities). The `IIS_IUSRS` group replaces the `IIS_WPG` group from earlier versions of IIS. Because the IUSR account is a built-in account, the IUSR account no longer requires a password. The IUSR account resembles a network or local service account.
0 commit comments