Worked for me in 30 seconds, short and sweet:
- In IIS Manager (run inetmgr)
- Go to ApplicationPool -> Advanced Settings
- Set ApplicationPoolIdentity to NetworkService
- Go to the file, right click properties, go to security, click edit, click add, enter Network Service (with space, then click 'check names'), and give full control (or just whatever permissions you need)