hi
check with your sysadmin how the SQL Server access is set, which can either be NTFS, SQL, or mixed.
If NTFS or mixed, which presumably is, according to the access control list (ACL) error message you get, the connection string must include an authorized domain user for the uid= parameter.
hmm, just what did you mean by
. . . if they go directly to a non asp page on the site they can get it ok.
how else can they get to SQL Server (from a browser based app) if not from within an asp page (unless from within a VB desktop app, if this is what you meant).