what user should I enable? as no additonal Active Directory users should have any more access...

 

It's like the local account asp uses is denying access to itself...?