In case anyone else every runs into this, my co-worker figured out the problem:
In the web.config file, I added the following line:
<identity impersonate="true" />
Then in IIS setup, I opened the properties for my website, went to Directory Security tab, and clicked on “Edit” in the Anonymous...