>Sorry about that, Evan. Dealing with security is a pain.

Thanks for all of your help. With our application, we realized that we were doing something odd, so intead of trying to solve the problem of IIS handing the PDF file to the user, we just used .NET (in particular ASP.NET) to hand the PDF to the user. Much more consistent, and shouldn't break next time IIS is upgraded.