thanks for all the suggestions, kolonell.

it looks like i figured it out. it actually turned out to be a server configuration issue, which is what i had suspected in the first place.
i decided to look up the 401.2 error, which is "Unauthorized: Access is denied due to server configuration."
reading the details on the error here,
http://blogs.msdn.com/david.wang/archive/2005/07/14/HOWTO_Diagnose_IIS_401_Access_Denied.aspx, it started to make sense that it was something to do with tomcat trying to communicate with IIS (my best guess anyway).
so i enabled anonymous access to IIS and voila, everything started coming up.
now i just need to see what the implications are of having anonymous access enabled in this environment.
again, thanks for your help.