[UPDATE] I still haven't figured out how to use domain permissions for the Application Pool using the ISS AppPool assigned to the Application Pool on a web server that is a domain member. I've come to the conclusion that if your web server is a domain member, your probably only running one website, so you can just make a machine account for it, and assign it to the App Pool and then the folder. If your hosting websites, then running the web server as a work group member is the way to go. I'm not going to make hundreds of special accounts for the app pool now. So what about the SQL Server, make it a domain member or a work group member. Now I ponder that question, but I made it domain member using SQL credentials. Now I have the 3 virtual machines running on the hyper visor, normally I would dedicate a physical server to database programs, and separate the 2, but I'm thinking that the 2 virtual machines constitute separation. Well no awnsers here at the moment, still waiting for an expert to comment on it. [Comment] I did figure out how to setup the web server to run on a hypervisor server core, and the virtual machines are cores as well. Uses much less memory now, I think I bought way too much RAM now. One thing funny is that I run FFMpeg and had to adjust the core to minimum GUI so I can get the shell and scrape it for data. Didn't think of that when I set the server up.