Ok
Thanks I have found the problem with your help, So hopefully with your help again I will get a solution.
I have impersonation ="true" userName ="Domain\ReportReader" password= "password"
I thought it would keep the users ID until the page opened and then impersonate the user "ReportReader" but it takes the ID as soon as it opens hence why it never likes the ID no matter who logs in because ReportReader is not a member of the "IISGroup"
Please can you help me to work round this.