SQL Server 2005 Windows authentication with AppPool running under service account identity

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

My web application is successfully running under the identity of a
service account.

The connection string in my web.config is similar to:

<add name="connStr1" connectionString="Data Source=serverA\sql01;
Initial Catalog=DB_A; Trusted_Connection=yes"
providerName="System.Data.SqlClient" />

Unless I specify the userName and the password in the <identity
impersonate="true"> section, I receive:
"Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON''"

I want to get all the passwords out of my web.config, and MSDN
indicates that if you configure your application pool to use an
identity, you can just use <identity impersonate="true"> with no
passwords.

I don't know if this is the "double-hop" issue, but does anybody know
if I need constrained delegation/Kerberos in this situation?

Thanks!
.

Relevant Pages