When I try to install DNN on windows server 2008 or vista, giving the NETWORKSERVICE full control still giving me errors(see below) and when I give full control to IIS_IUSRS ,the installation goes successfully.
Am I doing the right thing?

DotNetNuke Error: - Version 04.09.02

DotNetNuke Configuration Error

Could not find a part of the path 'C:\inetpub\wwwroot\DotNetNuke_Community_04.09.02_Install\Config\Backup_20098191446\web_.config'.Access to the path 'C:\inetpub\wwwroot\DotNetNuke_Community_04.09.02_Install\web.config' is denied.

DotNetNuke has extensive file upload capabilities for content, modules, and skins. These features require custom security settings so that the application is able to create and remove files in your website.

Using Windows Explorer, browse to the root folder of the website ( C:\DotNetNuke by default ). Right-click the folder and select Sharing and Security from the popup menu ( please note that if you are using Windows XP you may need to

before these options are displayed ). Select the Security tab. Add the appropriate User Account and set the Permissions.

• If using Windows 2000 - IIS5
  
  1. the [SERVER]\ASPNET User Account must have Read, Write, and Change Control of the virtual root of your website.
• If using Windows 2003 - IIS6
  
  1. the NT AUTHORITY\NETWORK SERVICE User Account must have Read, Write, and Change Control of the virtual root of your website.

Yes I did , but Add NETWORK SERVICE and give it Full Control does not work, sitll does not give me the permission to access the web.config.

I have to Add IIS_IUSRS and give it Full Control then it will work.Just wondering , am I doing the right thing?

Cheers.Can you explain why adding IIS_IUSRS opens a security risk and adding network service does not?Just an update on what happens.

It turns out that in  my application pool settings within IIS, the "identity" of the account has been set to ApplicationPoolIdentity rather than NetworkService.The "identity" of the account is the one that needs to be granted full permissions.  As long as that name matches, you are fine.  NETWORK SERVICE supposed to be  the default one ,but this is not the case in my machine.