If I bind from IIS (using anonymous user) to an object on a _different_
machine in the same domain with Active Directory using getObject(), under
what account does this bind occur? I would think it would be the IUSR_XXX
account from the IIS box, but the active directory seems to refuse this. Is
there a special permission on the active directory box I need to apply to
allow this to happen?