Chris Toohey touched on this a while back. I have been doing this for years and helped him a bit.
Since release 6 I have used this technique extensively to handle file attachments.
The concept is embedding a windows explore object in a form and passing it parameters.
First issue I encountered was anytime I tried to right click on a file or folder I got an error stating running a script on this maybe unsafe. So a little registry code to add all my mapped and local drives to the trusted sites list fixed this.
Next I wanted to lock down the target network share I was storing the files on.
Some win32api code provided a way for me to pass credentials to map and log into the share on form open, and disconnect it on form close. The users never knew where the files were.
I have attached a db here with a form that has the embedded object and the code to add logical and mapped drives.
If you are in Notes 8.x you can make a sidebar widget from the existing document in the db.
Contact me if you need help with this