It's a privileges issue. Change your GetObject call to include this part:
{impersonationLevel=impersonate,(Security)}

The ",(Security)" bit on the end makes all the difference.