Is there a difference between the users who can download, and those who can't? Such as; are they using different browsers, have their security settings been modified, or are they accessing the web server via different means, etc.
Probably a stupid question, but are permissions on the file...