NTLM issue with W2K3

We are using an LDAP server (external) to query for certficates and CRLs. We
access this store using CertOpenStore(). In the past, this has worked with
no problems. Under Windows Server 2003 SP1 it no longer works. I ran NetMon,
and found that the CertOpenStore is now attempting to issue an ldap_bind to
the LDAP server, using NTLM. Since this external server knows nothing about
us, it won't work. Using ldp.exe or the Softerra LDAP browser, we CAN
successfully browse the external LDAP store, since they issue an ldap_bind
with no authorization.

Is there a way in W2K3 to turn off this 'feature'? I have been investigating
group policy settings, but have not found anything (ldap related) that
appears to have any effect on this problem.

Help ... we're trying to build a production server for deployment, and need
to get this issue resolve ASAP.

thanks in advance

Al Norman
xwave