Which groups have permission to read data from the AD?
Since you're using non-domain credentials you'd probably have to allow Guest access. "Authenticated users" can read data from the AD. "Everyone" includes "Guest" (and "Guest" is disabled by default) and "Authenticated Users". "Anonymous" logins are excluded from "Everyone".