Child Beacon cannot download policy, returning the error "The remote server returned an error: (403) Forbidden"

[#1]

Summary

A child beacon will fail to download it's policy and a http 403 error will be showing in the BeaconEngine.log

Symptoms

The BeaconEngine.log will show the following policy download failure error:

2015-09-04 11:34:51,022 [Services.PolicyService|policy] [ERROR] Failed to download policy.
Flexera.SaaS.Transport.Core.ComplianceApiFatalException: Download failed for item https://sv000wnfnmbs01.srv.dsh.at/inventory-beacons/api/policy/?BeaconUID={5eb801c2-6bca-4553-af6e-87aadca7e7ad} (An error occurred while sending the request.) ---> System.Net.Http.HttpRequestException: An error occurred while sending the request. ---> System.Net.WebException: The remote server returned an error: (403) Forbidden.
at System.Net.HttpWebRequest.EndGetResponse(IAsyncResult asyncResult)
at System.Net.Http.HttpClientHandler.GetResponseCallback(IAsyncResult ar)
--- End of inner exception stack trace ---
--- End of inner exception stack trace ---
at Flexera.SaaS.Transport.Rules.PolicyClient.DownloadPolicy(String currentVersion, String inventorySettingsRevision)
at Flexera.Beacon.Engine.Services.PolicyService.GetPolicyFromServer(Int32 currentRevisionNumber, String inventorySettingsRevision)
at Flexera.Beacon.Engine.Services.PolicyService.UpdatePolicy(IActivityLogger activityLogger)
2015-09-04 11:34:51,022 [llers.PolicyController|policy] [ERROR] There is a problem on the beacon. The beacon could not determine if an upgrade is required.

Cause

The Beacon Engine service is running using the "Local System" account.

Resolution

Ensure an account with local Administrator privileges is created and reconfigure the Beacon Engine service to run under that user account instead of "Local System".