If you get this error after you have impersonation = true in web.config then you need to check the IIS Account setting for Anonymous authentication. By default it will be IUSR, change that to App Pool account and it should do the trick.
This works so far in MOSS but I am not sure about SP 10.
