upstream/icinga-powershell-framework
1
0
Fork 0
mirror of https://github.com/Icinga/icinga-powershell-framework.git synced 2025-12-20 23:00:35 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions

Fixes Windows Updates permission exception; Add KB

Browse source
This commit is contained in:
Lord Hepipud 2020-11-27 15:31:37 +01:00
parent cd81195ba1
commit 157e387324
3 changed files with 27 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
doc/10-Knowledge-Base.md
View file

@ -13,3 +13,4 @@ For this reason you will find a list of Icinga knowledge base entries below. Ent
| [IWKB000003](knowledgebase/IWKB000003.md) | The Icinga Agent service `icinga2` cannot be started/modified/added because it is marked for deletion. | | [IWKB000003](knowledgebase/IWKB000003.md) | The Icinga Agent service `icinga2` cannot be started/modified/added because it is marked for deletion. |
| [IWKB000004](knowledgebase/IWKB000004.md) | Use-Icinga : The 'Use-Icinga' command was found in the module 'icinga-powershell-framework', but the module could not be loaded. For more information, run 'Import-Module icinga-powershell-framework' | | [IWKB000004](knowledgebase/IWKB000004.md) | Use-Icinga : The 'Use-Icinga' command was found in the module 'icinga-powershell-framework', but the module could not be loaded. For more information, run 'Import-Module icinga-powershell-framework' |
| [IWKB000005](knowledgebase/IWKB000005.md) | powershell.exe : Failed to start service 'Icinga PowerShell Service (icingapowershell)'. | | [IWKB000005](knowledgebase/IWKB000005.md) | powershell.exe : Failed to start service 'Icinga PowerShell Service (icingapowershell)'. |
| [IWKB000006](knowledgebase/IWKB000006.md) | The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session". |

22
doc/knowledgebase/IWKB000006.md Normal file
View file

@ -0,0 +1,22 @@
# Icinga Knowledge Base - IWKB000006
## Short Message
The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session".
## Example Exception
[UNKNOWN]: Icinga Permission Error was thrown: WindowsUpdate
The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session".
## Reason
This issue is caused by calling [Invoke-IcingaCheckUpdates](https://icinga.com/docs/windows/latest/plugins/doc/plugins/14-Invoke-IcingaCheckUpdates/) over PowerShell Remote execution, with for example [check_by_powershell](https://github.com/Icinga/check_by_powershell).
The Windows COM Object is rejecting every access to these information over remote connections, making it impossible to execute the plugin.
## Solution
Right now there is no solution available for this problem. Microsoft is not allowing to grant permission to these objects over remote connections, which makes it impossible to use them. In addition there is no proper alternative for fetching pending Windows Updates and Hotfixes.
A possible fix which is suggested online is to add a scheduled task, running the command after being triggered by our execution and afterwards fetching the result from the task. This solution requires more research, testing and development.

5
lib/icinga/exception/Icinga_IcingaExceptionEnums.psm1
View file

@ -15,7 +15,10 @@
'Message' = 'The user you are running this command as does not have permission to access the requested Wmi-Object. To fix this, please add the user the Agent is running with to the "Remote Management Users" groups and grant access to the WMI branch for the Class/Namespace mentioned above and add the permission "Remote enable".'; 'Message' = 'The user you are running this command as does not have permission to access the requested Wmi-Object. To fix this, please add the user the Agent is running with to the "Remote Management Users" groups and grant access to the WMI branch for the Class/Namespace mentioned above and add the permission "Remote enable".';
'IWKB' = 'IWKB000001'; 'IWKB' = 'IWKB000001';
} }
WindowsUpdate = 'The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session". In order to fetch currently installed and pending updates, please grant the user the required permissions for fetching this information.'; WindowsUpdate = @{
'Message' = 'The user you are running this command as does not have permission to access the Windows Update ComObject "Microsoft.Update.Session".';
'IWKB' = 'IWKB000006';
}
}; };
[hashtable]$Inputs = @{ [hashtable]$Inputs = @{