Funnily enough, IIS used to use IUSR_ and IWAM_ accounts to avoid this "user" issue. I thought this went away years ago; apparently it's still alive and kicking. Now that's hilarious.