Firstly as Paul mentioned don't set your permission at the root. Secondly it is recommanded that the everyone group be disabled for security reasons anyway so you should be giving it permissions to anything. The ASP.NET account is the one you want to set permissions for.