Apparently IIS_IUSRS needs write permission to C:\Windows\Temp. Once enabled, I was able to follow error messages in PM2.