Yes, you're correct. You never need to give administrative rights to the IUSR account on a production server.
IMO, it would be better to remove the account from the Admin group again and find the real cause. However, if it's a development machine, it doesn't matter much as the risk is probably quite low (then again: a nice buggy for each loop using the FileSystemObject can easily erase your entire hard drive.... ;) )
Imar
---------------------------------------
Imar Spaanjaars
http://Imar.Spaanjaars.Com
Everyone is unique, except for me.
Author of
Beginning ASP.NET 3.5 : in C# and VB,
ASP.NET 2.0 Instant Results and
Dreamweaver MX 2004
Want to be my colleague? Then check out this post.