Active Homepage 10.2.300 multi app server and authentication question

Working on setting up Active Homepage and EDD in 10.2.300.13 and have two questions for someone more familiar with security setup than I am.

  1. To get Active Hompage to load from Epicor client we had to change the the IUSR to match the user we used in Application Pool Identity (service acct user). Is this the correct way or are there a better supported/approved way to get this to work.

  2. Can we support active homepage on multiple app servers pointing to one DB?
    We route our remote users to a couple of different app servers and we want to be sure we can give them Active Home page access also.