NTFS Permissions

I just want to confirm what I've read concerning APP CTR 2K SP2 ad NFTS 
permissions.
There has to a Domain account for every local account and group, is that 
correct? For example:
I need a Domain Group or Domain account for each- Network Service group, 
Iwam account, System Group, IIS_WPG group, administrators account and the 
asp.net account. These groups and accounts have permissions within
INETPUB.

Thanks
Vinnie