After you applied those perms did you do an iisreset? as without it the permissions will not be processed on IIS

I've also had this, I changed the apppool login account to be a domain admin (for testing) and it worked; so turned out to be a permission issue.

After the test I created a locked down version of the domain account (Exchange admin from memory); apppool needed recycle, iis didn't require reset.