Nagios Support Forum

That's probably what's going on here. I've asked our domain admins to verify that setting for me. Setting check_wmi_plus to use NTLMv2 seems to clear up the issue - at the least, we're not seeing audit failures in the DC event logs any more. We're looking at setting this option in our check_wmi_plus...

We have a number of service checks using check_wmi_plus. Since installing the February Windows patches on our domain controllers, these checks have been generating login failures. Has anyone else experienced this issue? The domain controllers are Server 2016, and the patches installed were KB4487026...