You need process monitor to track down permissions problems.
E.g. Problem
To hunt down a problem where say the IIS server couldn’t write to a directory, even after you have given permissions to the app pool account.
Solution
Figure: Apply filter to only show "ACCESS DENIED" results
Figure: And here we have the offending account