In IIS 7.0, the default identity for application pools is 'Network Service' (specifically the NT AUTHORITY\NETWORK SERVICE account). This account has limited privileges compared to Local System, making it more secure. Local System has excessive privileges and is not the default.