After upgrading the windows agent to 2.14.3 the output for Invoke-IcingaCheckUpdates changed to
[UNKNOWN] Windows Updates: 1 Unknown 6 Ok [UNKNOWN] Windows Update Error (0)
_ [UNKNOWN] Windows Update Error: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
Every other check is working fine.
Framework 1.10.1
Plugins 1.10.1
Anyone else having this issue?
Hi @pedronao,
My first guess is that some permission thing has changes, e.g. the Icinga2 agent is executed by a different user now or something like that.
How did you install it in the first place? Network User? local admin? JEA (+separate local user)?
Hi,
The update was done with local admin and icinga is still being executed by Network Service.
Is it possible, that you also upgraded (or at least changed) the IfW Framework or Plugins? And now they are executed by a different user?
No, the framework and plugins versions remained the same. I believe the agent update changed the permission from local system to network service. I wasn’t around when the check was initially implemented but my guess is that this is the case.
After reading the documentation I don’t think this check is possible to be executed remotely without admin rights.