setting permissions on IIS 6.0 $ win2003

I am trying to setup web server using win2003 and IIS 6.0. I ve benn doing reaserch but all I can find are articles about how good and secure IIS 6.0. working with microsoft for a long time I know there is no such thing as secure product. any one have an idea what is the best permissions to set up for system folders( %systemroot%, system32 and other system folder for IIS 6.0