i have a web application that used windows authentication that calls a web service that uses anonymous user authentication with impersonation, which uses an explicit username and password to access sql server.

1. The web service impersonation user has sufficient permissions (full control).

The webservice can be accessed thru the browser and runs fine, but when call by the application any methods that call sql server...