When I remove the connectionUsername and connectionPassword from the Membership Provider in the web.config file, I cannot connect to active directory. The MSDN Site says you can configure AD without a connectionUsername and connectionPassword.

If you do not specify account credentials, Active Directory uses your ASP.NET Web application's process account.

Note   The service account that you use to connect to Active Directory must have sufficient permissions in Active Directory. If you place your user accounts in an Active Directory organizational unit (OU), you can create and use a service account that has only read, write, and delete access on that OU (and, optionally, reset password privilege).

How do I check if the ASP.NET account has sufficient permissions in AD?

Any ideas as t how do to get AD to work without specifying a connectionUsername and connectionPassword?

Thanks!