<p>I have a website that works correctly under IIS 6.0: It authenticates users with windows credentials, and then when talking to the service that hits the DB, it passes the credentials.</p>

<p>In IIS 7.0, the same config settings do not pass the credentials, and the DB gets hit with NT AUTHORITY\ANONYMOUS.</p>

<p>Is there something I'm missing? I've turned ANONYMOUS access off in my IIS 7.0 website, but I can't get the thing to work.</p>

<p>These are the settings that I'm using on both IIS 6.0 and 7.0:</p>

<pre><code>&lt;authentication mode="Windows"&gt;
&lt;identity impersonate="true"&gt;
</code></pre>

<p>What changed from 6.0 to 7.0?</p>

Interesting... I have the opposite problem -
Not being able
to get the authentication to be passed from the client browser, through the webserver and onto the database within a large corporate network over firewalls.
I also feel that "end to end user" authentication to the database is a bad idea and a potential security risk.  There is nothing to stop the end user from loading up SQL Query and connecting directly to your database, so you'd better have your schema locked down!
@Esteban - Clarified my
not very useful in helping you
answer.