{"action":"opened","issue":{"url":"https://api.github.com/repos/sensu/sensu/issues/1115","labels_url":"https://api.github.com/repos/sensu/sensu/issues/1115/labels{/name}","comments_url":"https://api.github.com/repos/sensu/sensu/issues/1115/comments","events_url":"https://api.github.com/repos/sensu/sensu/issues/1115/events","html_url":"https://github.com/sensu/sensu/issues/1115","id":118074063,"number":1115,"title":"Sensu Windows Client - Access is Denied","user":{"login":"uberamd","id":67593,"avatar_url":"https://avatars.githubusercontent.com/u/67593?v=3","gravatar_id":"","url":"https://api.github.com/users/uberamd","html_url":"https://github.com/uberamd","followers_url":"https://api.github.com/users/uberamd/followers","following_url":"https://api.github.com/users/uberamd/following{/other_user}","gists_url":"https://api.github.com/users/uberamd/gists{/gist_id}","starred_url":"https://api.github.com/users/uberamd/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uberamd/subscriptions","organizations_url":"https://api.github.com/users/uberamd/orgs","repos_url":"https://api.github.com/users/uberamd/repos","events_url":"https://api.github.com/users/uberamd/events{/privacy}","received_events_url":"https://api.github.com/users/uberamd/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-11-20T16:17:57Z","updated_at":"2015-11-20T16:17:57Z","closed_at":null,"body":"We've started deploying sensu client to our Windows servers and are experiencing strange behavior that is hard to pinpoint what exactly is wrong.\r\n\r\nOn a majority of the servers the checks are executing without issues. Keepalive ALWAYS works, and the only other checks we're doing -- check diskspace and check process (from the plugins repo), work without error.\r\n\r\nHowever on a handful of servers, which are setup in the exact same way as the working ones (all automated), we see intermittent issues where the checks where they'll throw \"Access is Denied\". There appears to be no logical pattern to when it errors out or doesn't. Permissions on the files aren't ever changing. The server itself is sitting idle and checks go from working, to failing with \"Access is Denied\", to working again.\r\n\r\nHere is sample output from tailing the sensu-server log:\r\n\r\n```\r\n{  \r\n   \"timestamp\":\"2015-11-20T16:03:39.808494+0000\",\r\n   \"level\":\"info\",\r\n   \"message\":\"processing event\",\r\n   \"event\":{  \r\n      \"id\":\"9c084100-3524-4cdd-be7f-344a69c0d871\",\r\n      \"client\":{  \r\n         \"name\":\"DNS.REDACTED.LOCAL\",\r\n         \"address\":\"10.X.X.X\",\r\n         \"bind\":\"127.0.0.1\",\r\n         \"subscriptions\":[  \r\n            \"windows\"\r\n         ],\r\n         \"safe_mode\":false,\r\n         \"keepalive\":{  \r\n\r\n         },\r\n         \"version\":\"0.19.2\",\r\n         \"timestamp\":1448035412\r\n      },\r\n      \"check\":{  \r\n         \"command\":\"C:\\\\Program^ Files^ ^(x86^)\\\\sensu\\\\plugins\\\\windows\\\\check-service-windows.rb -s explorer.exe\",\r\n         \"interval\":60,\r\n         \"handlers\":[  \r\n            \"slack_prod\"\r\n         ],\r\n         \"occurrences\":5,\r\n         \"refresh\":43200,\r\n         \"subscribers\":[  \r\n            \"windows\"\r\n         ],\r\n         \"standalone\":false,\r\n         \"name\":\"windows_process_explorer\",\r\n         \"issued\":1448035389,\r\n         \"executed\":1448035389,\r\n         \"duration\":30.063,\r\n         \"output\":\"Access is denied.\\r\\n\",\r\n         \"status\":1,\r\n         \"history\":[  \r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"0\",\r\n            \"1\"\r\n         ],\r\n         \"total_state_change\":0\r\n      },\r\n      \"occurrences\":1,\r\n      \"action\":\"create\",\r\n      \"timestamp\":1448035419\r\n   }\r\n}\r\n```\r\n\r\nI'm suspecting this Access is Denied error isn't actually a permission issue because permissions are never ever changing on these machines and if it were permissions I imagine the check wouldn't be going between failing and passing randomly like it is.\r\n\r\nThe only other output these errors generate is a log entry in the Windows System Event Log:\r\n\r\n` The server {some guid} did not register with DCOM within the required timeout `\r\n\r\nWe've verified DCOM permissions are fine, and again, I suspect if it were a permission error the check would consistently fail or succeed, and not flap around like it does now on these handful of machines.\r\n\r\nAnyone experienced this or have any pointers for enabling more verbose output within the Sensu Client? I tried using the log_level flag set to debug but the output is still lacking any valuable indication as to where in the processing Sensu believes access is denied."}}