To validate the ALM-PC System User Account (IUSR_METRO) has the correct permissions, you must access the Local Policy Editor
a. Steps to get to the Local Policy Editor:
* Right click on the start menu and select ''Run''
* Type the following: gpedit.msc
* When the Local Policy Editoropens navigate to the following folder
* Windows Settings> Security Settings> Local Policies then click on ''Users Rights Assignment''

b. Validate that the IUSR_METRO account and the Administrators account are both defined on the following policies:
* Allow Logon as a Batch
* Allow Logon as a Service
* Allow log on locally
* Access this computer from the network
* Impersonate a client after authentication
* Create global object

c. Any ''Deny'' will overrule any ''Allow''

I hope this helps