DCPROMO does not retain permissions on some IIS folders
Content provided by Microsoft
When you promote a Microsoft Windows Server 2003 member server to a domain controller, if Internet Information Services (IIS) is installed on the server, you may see the following symptoms:
No compressed files are stored in the temporary folder (also known as the cache directory), even though a client that supports HTTP compression has requested them.
No files are cached in the ASP Compiled Templates folder.
For security reasons, IIS should not be installed on domain controllers.
The operation that promotes a member server to a domain controller (DCPromo.exe) resets permissions on some folders. The Access Control Lists (ACLs) for three folders are not set correctly during this operation.
You may also see the following in your application event log: If you view permissions on the following folders, you will see that the IIS_WPG and the NT AUTHORITY\NETWORK SERVICE groups do not have permissions on these folders:
You can also access the product documentation through IIS Manager. For more information about how to access this Help feature, click the following article number to view the article in the Microsoft Knowledge Base: