We have an asp.net web application on a windows server 2003 box calling a web service on a different windows server 2003 box.
The web application and web service have disabled anonymous, use windows authentication and do not impersonate. The web application uses an app pool that runs with an identity xyz. The web service is set to only allow user xyz access. This allows us to secure the web service to only specific applications and/or users. Restricting the web service to a user that the application is running as also avoids the double hop problem.
This all works well on almost all of our servers, but we have one server that if we deploy the web service to, it will always deny authorization even. That web server is exactly the same code base, has the same settings and is configured exactly the same under iis as it is on all the other servers, yet it is the only deployment instance to does not seem to work.
I'm not sure if it's an IIS configuration issue, and AD issue, or a machine configuration issue. Any ideas?
Edit: None of our servers or AD users are set to allow delegation, but that shouldn't matter because this is a one hop scenario
