win2003 server file security essentials (for HTTP use)

Anonymous user, IIS_WPG, and SYSTEM user must all have permission to access files via HTTP (i.e. a web server).

Also, be aware to allow sub-folders to inherit the security settings you specify.

Specific read access is required so that these users (above) can navigate the folders to get down to the specific intended folder.

(this is not the same in win 2008)