I posted this question to StackOverfow:
NetworkService under IIS has empty AppData path
It affects the ApplicationPoolIdentity too, no matter whether I enable Load User Profile or not, I always get null results (the folders do exist). If I change the identity to use LocalSystem, then I do get a result.
Paul