There is a required field on t he package called "ProtectionLevel". This may not be an issue with a package deployed to SQL Server as they can assume the user is already authenticated but it seems to be an issue with file based execution. I am currently calling DTExec myself and passing in the password but I would be glad to test any fix you apply.