IIS or IIS_IUSRS so that PHP can write files for WordPress

Question

I am running IIS 8 in a virtual machine (Windows Server 2012 Datacenter) in Azure. I have WordPress and its dependencies installed using the installer of the web platform 4.6

I am having problems when WordPress needs to post files from the admin console. I added the ftp data to the file C:\inetpub\wwwroot\blog\wp-config.php and this works fine. But whenever WordPress tries to write a file from its control web page, for example, to create a child theme or to load media, I received an error message (for example, "Failed to load due to error" or "Target directory of child themes "could not be created. This is probably a permission error.)

I can fix this with the EvilDr idea of adding permissions to an IUSR account. But I'm nervous about this, because it seems that IUSR should only have access to what it needs; he should never gain access to everything else .

Is reading IUSR Modifying, reading and executing, the contents of the list, read and write permissions for the WordPress C:\inetpub\wwwroot\blog and its subfolders, the correct and safe way to get WordPress to work with IIS 8?

Answer 1

Giving NETWORK SERVICE write permissions to the folders that WordPress needs to write should do the trick.

UPDATE: NETWORK SERVICE will also need to read and execute, the contents of the list folder and read permissions.

EDIT: I guess I would add file / folders, etc. For completeness:

 /wp-config.php /wp-content/ (recursively)