If you're running in a hosted environment, you may need a database password in your connect string. I believe MSSQL will try to use Windows authentication if you don't specify a password, but I don't know if that works under shared hosting.
If you are running on your own server, you definitely shouldn't need to use medium trust.