'Access is denied' on Launch Application action in Control Tower

I’m running into an issue with a bot that is deployed to a server we just upgraded to the latest release. This issue occurs when I attempt to run the bot from Control Tower. It works fine when I run the bot from Studio, and it has run successfully from Control Tower in previous releases of WorkFusion. Any suggestions appreciated.

Here’s the action generating the error. Basically, we’re sending a shutdown command to the OneDrive plug-in on the hosting server.

TemplateAction[templateName=LaunchAppAction.ftl,id=2,name=Optional[LaunchAppAction],parent=1,nextSibling=3,arguments=ActionArguments[delay=[0],timeoutMs=[10000],autoDetectWindow=[false],xsi:type=[recorder:LaunchAppAction, recorder:LaunchAppAction],pollingInterval=[300],active=[true],command=[C:\Users\srv_tb_casemgmt\AppData\Local\Microsoft\OneDrive\OneDrive.exe /shutdown],awaitTimeout=[5000]]]

Here’s the error I’m getting. (Again, I don’t get this error in Studio–the task runs fine.)

Caused by: org.openqa.selenium.WebDriverException: CreateProcess error=5, Access is denied
Command duration or timeout: 0 milliseconds
Build info: version: ‘9.4.0.3’, revision: ‘abf2ebe0f1’, time: ‘2019-05-29T13:21:06.482Z’
System info: host: ‘P10TBAUTOMATE05’, ip: ‘10.10.1.178’, os.name: ‘Windows NT (unknown)’, os.arch: ‘amd64’, os.version: ‘10.0’, java.version: ‘1.8.0_121’
Driver info: com.freedomoss.crowdcontrol.webharvest.selenium.wrapper.RemoteDriverWrapper
Capabilities [{capabilityNodeId=http://127.0.0.1:15411, extra.start.in.private=false, extra.executor.id={run.name=UW Document Download with Renaming V01 Process, task.uuid=94036f5b-8a20-41db-a303-a854388f91e9, task.name=UW Document Download with Renaming V01, context.path=/workfusion, host.name=http://localhost:15280, run.author.email=john@doe.ex, run.uuid=94036f5b-8a20-41db-a303-a854388f91e9, run.author.fullname=John Doe}, CLOSE_ALL_WINDOWS=false, browserName=universal, maximize.on.startup=true, javascriptEnabled=true, extra.capabilities.context={“browserType”:“universal”,“startInPrivate”:false,“blockImages”:false,“nodeId”:“http://127.0.0.1:15411”,“maximizeOnStartup”:true,“customCapabilities”:{“extra.start.in.private”:false,“SEARCH_ALL_WINDOWS”:true,“CLOSE_ALL_WINDOWS”:false},“executorId”:{“host.name”:“http://localhost:15280”,“context.path”:"/workfusion",“task.uuid”:“94036f5b-8a20-41db-a303-a854388f91e9”,“run.name”:“UW Document Download with Renaming V01 Process”,“run.uuid”:“94036f5b-8a20-41db-a303-a854388f91e9”,“run.author.fullname”:“John Doe”,“run.author.email”:“john@doe.ex”,“task.name”:“UW Document Download with Renaming V01”}}, platformName=WINDOWS, SEARCH_ALL_WINDOWS=true, platform=WINDOWS}]
Session ID: b4edfa40-2251-4ce0-8f85-ff1035b88b02