The anonymous account must have the user right to log on locally. If the account does not have the Log On Locally permission, IIS will not be able to service any anonymous requests. The IIS installation specifically grants the Log On Locally permission to the IUSR_computername account. Also, if the anonymous user account does not have permission to access a specific file or resource, the web server will refuse to establish an anonymous connection for that resource.