The following directories need write access for the IUSR_<machinename> account. This is normally the account that runs the application.

_upload
reports
logs
rsscache

Normally the installer sets these permissions, but at least in VMware environments, the permissions are not set.

Files run with the config wizard need read access for IUSR_<machinename>.