You should do this in order to play with zencart on iis 4-6 and later.
It is the way the permission settings handled instead apache.