And fixing the permissions for the windows service account is the best way to go.... I just don't know what it needs because that account as well as mine have sysadmin and local admin rights.
I'm using WinSCP tool for sending to a secured FTP site. The SSIS task which executes WinSCP fails when the job runs with Agent service set to the usual account. If I change the Agent service to logon as MY account, bounce the service.... then the job will run successfully from a schedule.