kimk:I've just spent quite some time debating this with our local Microsoft customer service and a local distributor.
That's your problem. :)
With Microsoft licensing, you need to ask if you need a license. If they say yes, hang up and call back. The next response may be no. Nobody, not Microsoft's sales people or distributors, actually understands this licensing. A talk I had with three of Microsoft's licensing reps, the people who manange these things, ended with three differing opinions and a call to the legal department. The result was a declaration that you do not need CALs or any other Microsoft licensing (beyond the server and default CALs) for a public web server that did not authenticate to a Windows account.
Don't ask on SQL, except for the specific SQL Express licensing nobody could agree whether a SQL Server installation on the same web server or on a separate server when used for a web site required special SQL licensing. The bottom line was that it was probably okay to use either a Windows or SQL Server authenticated account to access the server, but that impersonation threw a monkey wrench into licensing that the lawyers possibly hadn't considered. Safest is a per processor license for all processors.
Microsoft Licensing - Don't Ask, Don't Tell.
Jeff
Look for Wrox's new book Professional IIS 7 in your local bookstore, or order now at
Amazon.com