This is just a quick post to share the commands I use, after each Umbraco install, to set the permissions properly.

This works for me under IIS 7.5, and Umbraco (4.6.1 and 4.7 Beta). Of course, you are going to need access to the machine to run this - if you are using a third-party hoster, you'll need to set the equivalent rights using whatever tool they provide.

I put all the commands below into a "BAT" file and run it from the command line to make it easy, but as long as you execute the commands, it should matter how. You need to replace the {YOUR_APPPOOLNAME} with the name of whatever app pool you are running under. You don't need the curly braces around your app pool name.

icacls . /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls app_code /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)RX
icacls app_browsers /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)RX
icacls app_data /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls bin /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)R
icacls config /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls css /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls data /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls masterpages /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls media /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls python /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls scripts /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls umbraco /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)R
icacls usercontrols /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)R
icacls xslt /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M
icacls web.config /grant "IIS APPPOOL\{YOUR_APPPOOLNAME}":(OI)(CI)M