I suffered a similar problem, although with a slightly more complex setup. Authentication to the website, using NTLM, worked fine. But an ASP script then queried a backend resource (LDAP directory in this case). For this impersonation/delegation to work, Kerberos would have to be used. The server, client...