try :
<body onload="document.location='c:\mydoc.doc'">
Although depending on how your browser is configured, this could open in the browser window / open in word etc, check your MIME type settings. If you use this on the web, then you are likely to have little / no control over how the data is presented to an end user - especially those without word ;-)