After upgrading the windows agent to 2.14.3 the output for Invoke-IcingaCheckUpdates changed to
[UNKNOWN] Windows Updates: 1 Unknown 6 Ok [UNKNOWN] Windows Update Error (0)
_ [UNKNOWN] Windows Update Error: Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
Hi @pedronao,
My first guess is that some permission thing has changes, e.g. the Icinga2 agent is executed by a different user now or something like that.
How did you install it in the first place? Network User? local admin? JEA (+separate local user)?
No, the framework and plugins versions remained the same. I believe the agent update changed the permission from local system to network service. I wasn’t around when the check was initially implemented but my guess is that this is the case.
After reading the documentation I don’t think this check is possible to be executed remotely without admin rights.