so it seems this just doesn't work with intranet sites (e.g., integrated windows authentication) hosted on W2K3
the iframe mode ends up loading the file into server memory, which won't work for very large files
if you can figure out another solution, let us know