I wasn't sure the best way to ask this question, which made for some pretty unhelpful google searches.
I was finally able to authenticate via AD using Forms Authentication. Part of the problem I had is that our AD doesn't allow access to any non-AD accounts, so any elevated level of a service (ASPNET) wasn't going to work.
I eventually learned how to pass through my personal credentials via the membership > providers > add section of the web.config. I even encrypted that via the aspnet_regiis commandline utility.
I don't want to have to have my credentials entered into the web.config file (even encrypted) - mostly for continuity of the application. If I die, get fired, quit, or change my password (whichever comes first... here's to hoping 'password change' wins that battle), the application would have to get updated.
When I run the app without my credentials (even with impersonation set to 'on'), I get ...
Go to the complete details ...