Styjun

We're running a Jenkins slave using a windows domain account to run the service and are configuring Web Deploy 3.6 to deploy to our application in IIS (8.5). We have this configured to deploy on other servers which use the Jenkins service account to deploy and it's running as it's supposed to, but for this one server we're getting the following permissions error:

Start Web Deploy Publish the Application/package to https://<app url>:8172/msdeploy.axd?site=<app> ...
 Starting Web deployment task from source: manifest(E:JenkinsCDPworkspace<app folder><app name>GUI - Stage<app folder><app name>objDebugPackage<app name>.SourceManifest.xml) to Destination: auto().
E:Program Files (x86)Microsoft Visual Studio2017CommunityMSBuildMicrosoftVisualStudiov15.0WebMicrosoft.Web.Publishing.targets(4292,5): msdeploy error
 ERROR_USER_UNAUTHORIZED: Web deployment task failed. 
(Connected to the remote computer ("<app url>") using the Web Management Service, but could not authorize. Make sure that you are using the correct user name and password, that the site you are connecting to exists,
 and that the credentials represent a user who has permissions to access the site. Learn more at: http://go.microsoft.com/fwlink/?LinkId=221672#ERROR_USER_UNAUTHORIZED.)

The only difference with this server is that it's also running with another account in the app pool in IIS. We've replaced the default admin and user created when Web Deploy is installed with the Jenkins service account and updated the rules in the Management Service Delegation to use that account as well. The Jenkins service account and the app pool account has full permissions to the inetpub directory and we even added it to the administrators group (even though it's not added to the admin group on the other servers that do work) and we still get the same error. I also rebooted the server after installing. I checked the Management Service log and see the following:

#Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) cs(Referer) sc-status sc-substatus sc-win32-status time-taken
2019-03-26 15:28:18 <ip addr1> HEAD /msdeploy.axd site=<app name> 8172 - <ip addr2> - - 401 2 5 2089
2019-03-26 15:31:53 <ip addr1> HEAD /msdeploy.axd site=<app name> 8172 - <ip addr2> - - 401 2 5 11

I'd expect to see the actual ID for the cs-username, but I don't see anything. It's as if the service doesn't see the Jenkins service account. But if I run another build using Web Deploy on another server and the same Jenkins slave it functions as it should. We expect to see the following in the Management Service log:

2019-03-18 03:27:23 <ip addr1> HEAD /msdeploy.axd site=<app name> 8172 <domain><user> <ip addr2> - - 200 0 0 139

Any input would be greatly appreciated.