Great that you implement some configuration hints for IIS as well, but the previous lines need a bit more explaining, so everyone know what happe when they do this. I’m no expert, but running an application as LocalSystem might be a serious security risk…? And why add “Authenticated users”? If you’re already running the ApplicationPoolIdentity (as you should), this is also what needs the permissions.

Kind regards,
Espen.