Why does the IIS_IUSRS gorup and it's "IIS AppPool\DefaultApp Pool" member exist on my local PC when ISS isn't installed or needed? Can I remove the group?
More specifically I'm researching security controls and why the IIS_IUSRS group needs to have the "log on as a batch job" permission since IIS isn't installed and the group supposedly isn't needed.