[dev.icinga.com #10177] Windows Check Update -> Access denied

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/10177

Created by sailavid on 2015-09-20 13:02:38 +00:00

Assignee: jflach
Status: Resolved (closed on 2015-09-21 13:50:05 +00:00)
Target Version: 2.3.11
Last Update: 2015-09-25 12:42:31 +00:00 (in Redmine)

Icinga Version: 2.3.10
Backport?: Already backported
Include in Changelog: 1

---

I installed the most recent Icinga 2 Agent client (v2.3.10) on Windows Server 2008 R2.

Then I set up a service definition for the check-update command.
This check always returns "Access denied".

This is caused by the fact that the Icinga2 Service (on Windows) is running under the "Network Services" Account which doesn't have access to the WUA API.
After changing the Service to use "Local System Account" the check returns the correct results.

It should be documented somewhere that the Icinga2 Service has to run under the Local System Account.

Changesets

2015-09-21 13:49:36 +00:00 by jflach 8caac68

Doccument permission problems with check_updates.exe

fixes #10177

2015-09-22 10:26:53 +00:00 by jflach 9010dbe

Doccument permission problems with check_updates.exe

fixes #10177

2015-09-25 12:42:08 +00:00 by jflach e21deb0

Doccument permission problems with check_updates.exe

fixes #10177

[icinga-migration]

Updated by jflach on 2015-09-21 13:45:10 +00:00

• Category changed from Plugins to Documentation
• Assigned to set to jflach
• Target Version set to 2.4.0

I'll add a note that the Network Service Account does not have the required permissions, it is then up to the user whether he/she runs Icinga 2 as Local System/root/w/e or finds another workaround.

[icinga-migration]

Updated by jflach on 2015-09-21 13:50:05 +00:00

• Status changed from New to Resolved
• Done % changed from 0 to 100

Applied in changeset 8caac68.

[icinga-migration]

Updated by mfriedrich on 2015-09-25 12:42:31 +00:00

• Target Version changed from 2.4.0 to 2.3.11
• Backport? changed from TBD to Yes