I have added windows-update metric & got the access-denied error… After digging i have noticed the following information.
This is caused by the fact that the Icinga2 Service (on Windows) is running under the “Network Services” Account which doesn’t have access to the WUA API.
After changing the Service to use “Local System Account” the check returns the correct results.
I am now thinking to add group policy to add icinga2 user as local admin on all the remote boxes. what kind of access icinga2 user should have to all get all kinds of metrics… Can you please advise?