I am using nopcommerce v4.2 but this will worl for all 4.+ versions.
What you have to do is give permission to the published folder/directory which your website points to
You have to add this user to the security section(folder properties) "IIS_IUSRS"
Give it at least the read/write permission