I've added a 2008 server to a 2003 domain, when I add the IIS role everything installs without error... but when the server starts I get an error "The Windows Process Activations Service (WAS) encountered an error attempting to look up the built in IIS_IUSRS group..." (EventID 5153). A look at the domain builtins indicates that the IIS install didn't create the new IIS_IUSRS group and IUSR account like it's apparently supposed to. The help button jumps to an unfilled template (no help there).
Do I need to manually create this user and group? I wouldn't think so since there's no information regarding how to do it.