Application Pool Identity on Win2003
This can be trivial for those fluent in IIS and Windows security. Not so for regular developers who need to impersonate their applications in IIS.
To get your application pool run under another user account, that user account needs to be a member of the IIS_WPG security group.
Hope this will save someone hours of work.