IUSR_METRO (or your system user account) need the following user rights permissions.
TO check do the following:

- Start Menu> Run- and type in ''gpedit.msc''. (Without the double quotes)
- In the Local Policy editor navigate to the following -- Computer Configuration> Windows Settings> Security Settings> Local Policies> User Rights Assignments
- Ensure that IUSR_METRO (Or your system user account) an Administrators are both defined on the following policies.
- ? Access this computer from the network
- ? Allow log on locally
- ? Create global objects
- ? Impersonate a client after authentication
- ? Log on as a batch job
- ? Log on as a service
- Ensure that ''No Deny'' entries are defined that includes Administrators or IUSR_METRO (Or your system user account). Any ''Deny'' will supersede any ''Allow''
- If there is a third column that states ''Source GPO'' it will indicate the GPO name. Also if the icon at the beginning of the policy is ''Green'' that indicates it is affected by a GPO.