Trying to find the connection source

I am trying to get rid of a former user domain (inherited a multi-domain
structure years ago and need to flatten it). Domains are Win2k AD in a
parent / child structure (removing the child domain), and running SQL
2000 SP4.

Have an issue with an ASP site used for reporting from SQL 2000. It is
still connecting to a database using an account from the old domain.
This is showing in Enterprise Manager (Current Activity | Process Info).
If the DC is taken off-line, the ASP web errors out with a SQL error.

What I have already checked:
1) Web Site (IIS Manager): Anonymous access is through another account
in the domain that is staying

2) Secure Communications (site certificate): Mapping is to the same
account as the web site anonymous access

3) ASP pages that call SQL are using integrated security SSPI

4) System DSN uses network login (not the mystery one)

5) Have text searched all pages for the domain name - no sign of the
user (or the old domain) found


(Cross posted to m.p.sql.security as it involves both SQL and ASP)