What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

My PowerShell sensor returns an error message. What can I do?

Votes:

0

When I add a Windows Updates Status (PowerShell) sensor to my PRTG installation, an error message appears.

The error message is “An unknown security error occurred”. The connection to the remote server failed and WinRM is unable to process the request. There seems to be an issue with Kerberos authentication.

—or—

The error message is "No Logon Servers Available".

—or—

The error message is "Unauthorized Access".


I also get this error message after creating other PowerShell sensors. What can I do?

authentication error error-messages kerberos powershell prtg security windows-updates-status winrm

Created on Nov 8, 2013 3:54:41 PM by  Gerald Schoch [Paessler Support]

Last change on May 21, 2019 5:37:37 AM by  Maike Guba [Paessler Support] (2,404) 2 1



4 Replies

Accepted Answer

Votes:

0

This article applies as of PRTG 22

Tips for running sensors using PowerShell scripts

The following tips to resolve PowerShell error messages apply to preconfigured and custom sensors.

"Unknown security error"

If you add a PowerShell sensor to PRTG, you sometimes may get the error message below, even if your systems are in the domain and the credentials are valid:

Connecting to remote server failed with the following error message: WinRM cannot process the request. The following error occurred while using Kerberos authentication: Unknown security error. Possible causes are: -The user name or password specified are invalid. -Kerberos is used when no authentication method and no user name are specified. -Kerberos accepts domain user names, but not local user names. -The Service Principal Name (SPN) for the remote computer name and port does not exist. -The client and remote computers are in different domains and there is no trust between the two domains. After checking for the above issues, try the following: -Check the Event Viewer for events related to authentication. -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or use HTTPS transport. Note that computers in the TrustedHosts list might not be authenticated. -For more information about WinRM configuration, run the following command: winrm help config. For more information, see the about_Remote_Troubleshooting Help topic.

Use the FQDN (Fully Qualified Domain Name) instead of the IP address. You can specify the FQDN in the IPv4 Address/DNS Name field in the settings of the sensor’s parent device.

"No logon servers available"

If WinRM cannot process the request and you get a No logon servers available error, see I get the error "WinRM cannot process the request" when I try to use a PowerShell sensor.

"Unauthorized access"

Windows 64-bit systems run two PowerShell versions: PowerShell 64-bit and PowerShell 32-bit. Make sure that you set the correct execution policy for both and that it is unrestricted: Set-ExecutionPolicy Unrestricted For more information, see PowerShell 32-bit or 64-bit and Execution Policy.

Note: The user context may be different when the script is executed by the probe system (this is the "LOCAL SYSTEM" account by default) and not by your Windows account when you manually run the script.

Created on Nov 8, 2013 3:59:09 PM by  Gerald Schoch [Paessler Support]

Last change on Jan 3, 2023 9:42:43 AM by  Brandy Greger [Paessler Support]



Votes:

0

Hi,

I had the same problems: I had to install PowerShell 3.0 (with Management Framework 3) and path to 64bit-Version had to be added to path, system had to be rebooted to recognize the new path, execution policy had to be redefined. And I set the Scope to "LocalMachine". But I always get the following error (copy from
<localprobe>\C$\ProgramData\Paessler\PRTG Network Monitor\Logs (Sensors)
):

& : Die Datei "C:\Program Files (x86)\PRTG Network Monitor\custom 
sensors\EXEXML\PRTG-Veeam-SessionStats.ps1" kann nicht geladen werden, da die 
Ausfhrung von Skripts auf diesem System deaktiviert ist. Weitere 
Informationen finden Sie unter "about_Execution_Policies" unter 
"http://go.microsoft.com/fwlink/?LinkID=135170".
In Zeile:1 Zeichen:138
+ if ($PSVersionTable.PSVersion.Major -ge 5) { Import-Module 
Microsoft.PowerShell. ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~
    + CategoryInfo          : Sicherheitsfehler: (:) [], PSSecurityException
    + FullyQualifiedErrorId : UnauthorizedAccess

What is the problem with line 1, Position 138. This is not MY script. Is there something running with the local probe before my script? Or is it the parser after the JSON / XML Result?

Thanks in advance.

KR

Created on Feb 24, 2017 7:44:19 AM

Last change on Feb 24, 2017 8:35:33 AM by  Luciano Lingnau [Paessler]



Votes:

0

Hello Stefan,
thank you for your post.

I kindly ask that you keep the communication about this custom script on the appropriate topic:

However, I'm already able to tell you that the following message:

kann nicht geladen werden, da die Ausführung von Skripts auf diesem System deaktiviert ist

Refers to the powershell execution policy. Keep in mind that the Probe is a 32-bit process and will use the 32-bits powershell, you have to configure the execution-policy in the 32-bits version of powershell. Please refer to:

Best Regards,
Luciano Lingnau [Paessler Support]

Created on Feb 24, 2017 1:02:33 PM by  Luciano Lingnau [Paessler]



Votes:

0

Luciano,

THANK YOU. I set the restriction policy for the 32bit powershell (...\windows\SysWOW64\WindowsPowershell\v1.0\powershell.exe), now it works great.

KR

Stefan

Created on Feb 24, 2017 1:11:21 PM

Last change on Feb 24, 2017 1:41:52 PM by  Luciano Lingnau [Paessler]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.