Ran into a strange “Access is denied” problem running a web project on a Win2K domain controller that uses impersonation.  The exception was coming from somewhere outside of my code and early.  Application_BeginRequest would fire, but it threw before even Session_Start went off.  Luckily, I ran across this article which at least gave me some peace of mind and a workaround.