if you say that SQL authentication works why don't you then create a view in the form of

linked-server.dbname.dbo.tabletoquery and if the view is created give a windows account rights...