Cannot read configuration file due to insufficient permissions

One of my deployment targets has started doing this when trying to deploy a web application.

This particular target runs the tentacle as a local user rather than Local System. It does this because another of this target’s roles requires deploying files to a network share. Other targets in this same environment don’t need this, and therefore they run as Local System.

The user that runs the tentacle is a member of Administrators.

A few weeks ago this was not a problem. I’m not sure what changed. What can I do to pin this down?

09:53:15   Verbose  |         Octopus Server version: 3.3.10+Branch.master.Sha.365b9921133c9490a3ac820844cbb8edb603873f
09:53:15   Info     |         Executing script on 'SGpressero1'
09:53:17   Verbose  |         Octopus Deploy: Calamari version 3.3.10+Branch.master.Sha.dab9a87456f8d6de68c2f8cca2e5719e8069c9b5
09:53:18   Verbose  |         Name                           Value
09:53:18   Verbose  |         ----                           -----
09:53:18   Verbose  |         PSVersion                      4.0
09:53:18   Verbose  |         WSManStackVersion              3.0
09:53:18   Verbose  |         SerializationVersion 
09:53:18   Verbose  |         CLRVersion                     4.0.30319.42000
09:53:18   Verbose  |         BuildVersion                   6.3.9600.17400
09:53:18   Verbose  |         PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0}
09:53:18   Verbose  |         PSRemotingProtocolVersion      2.2
09:53:18   Info     |         WARNING: The names of some imported commands from the module 'Library_SaveSiteBindings_636132920534375366' include
09:53:18   Info     |         unapproved verbs that might make them less discoverable. To find the commands with unapproved verbs, run the
09:53:18   Info     |         Import-Module command again with the Verbose parameter. For a list of approved verbs, type Get-Verb.
09:53:18   Error    |         Test-Path : Cannot retrieve the dynamic parameters for the cmdlet. Filename: redirection.config
09:53:18   Error    |         Error: Cannot read configuration file due to insufficient permissions
09:53:18   Error    |         At C:\Octopus\Work\20161028145412-285\Script.ps1:8 char:5
09:53:18   Error    |         + if (Test-Path IIS:\AppPools\$appPoolName){
09:53:18   Error    |         +     ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
09:53:18   Error    |         + CategoryInfo          : InvalidArgument: (:) [Test-Path], ParentContainsErrorRecordException
09:53:18   Error    |         + FullyQualifiedErrorId : GetDynamicParametersException,Microsoft.PowerShell.Commands.TestPathCommand
09:53:18   Fatal    |         The remote script failed with exit code 1

Hi Rpresser,

Thanks for getting in touch! Are you able to confirm that user explicitly has permissions to access IIS? (Ontop of Administrator)
We know that sometimes windows update can cuase user account permissions to change.

Looking forward to hearing from you.

Best regards,