It sounds like you're impersonating the identitity coming to you from IIS. What are the setttings on IIS - is it passing you the true credentials of a user on your Windows network, or is it passing you it's own identity (normally IUSR_machinename)?
IUSR_machinename is a low priviledge account, similar to ASPNET.
Eric
|