A bit of searching without the wordpress keyword brought up this solution:
PHP uploads files to a temp directory and then moves the file to your directory.
By default, it will choose c:\windows\temp.
Allow IIS_IUSRS appropriate permissions for the temp folder (read maybe write?) and it should solve the problem
