Hello
I try to configure the Sensor "Windows Updates Status" for our Servers, i am not a fan to give our "AD PRTGT Service User" full admin rights on every windows Server. So first i try it with the group "Remote Management Users", i put the "AD PRTGT Service User" in the "Remote Management Users" of the target server which i wanna monitor. Now i have a conncetion to the server but i can't view the update status, the sensor is orange and the i receive this message: Update history does not contain any entries. Please enable the sensor debug options and contact support for further help.
When i try it with the powershell command under the PRTG Service User i get the message "access denied":
C:\Users\su_prtg Enter-PSSession srv-01 [srv-01]: PS C:\Users\su_prtg\Documents> wmic qfe list wmic : ERROR: + CategoryInfo : NotSpecified: (ERROR::String) [], RemoteException + FullyQualifiedErrorId : NativeCommandError Description = Access denied
Does anybody know a possible way to give the minimum rights to view the installed updates? Local admin rights is not a solution for us :). Sorry for my bad english.
I would be lucky when in every sensor description would be a exact definition which windows rights would be necessary.
Best regards
Silvio
Assuming this is a WMI rights issue, you should check the WMI rights on the target system.
There are plenty of articles out there - but to get you started - check the follow things out - as for the rights management - the better choice might be Computer Management in your case
And this link might be useful: https://docs.microsoft.com/en-us/windows/desktop/wmisdk/securing-a-remote-wmi-connection
Hope that helps..
Regards
Florian Rossmark
www.it-admins.com
Feb, 2019 - Permalink