How to run IIS7 Application Pool under domain account?

What are the steps to be made开发者_JS百科 to run an IIS7 Application Pool under a domain account? I know how to create a domain account and how to set the identity of the Application Pool.

My question is rather what rights does this Domain Account need to have? (logon right to the server? read rights to the files of the web sites running under application pool?)

The reason I want to run the Application Pool under a domain account is to set security on a remote MSMQ queue.