Do you have an ASP.Net application that will run in an Application Pool with a specific identity? Before you enter the user account in the Identity tab of the Application Pool properties dialog, you should add the account to the local group IIS_WPG. If you forget, you get permission issues. And permission issues are the hardest to fix, imho.

(I am sure you can guess why I am blogging this...)