Performance Monitor Users no longer able to add or remove counters

  • Thread starter Thread starter xtopher
  • Start date Start date
X

xtopher

Guest
Hi there,

I recently installed a bunch of windows updates on my development
server. Since then only users in the Administrators group can add or
remove performance counters. I realize that this is typically the case
in real life, you want an administrator to do the install and only add
or remove counters during an install. But I'm running a continuous
integration environment with unit tests. Cruise Control runs as a
service under an non-admin account and must run tests that (you
guessed it) add and remove performance counters.

I've been playing with the permissions on the registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
\Perflib
to no avail. It completely ignores the permissions set on the key and
only allows administrators the ability to make changes. Everything
else gets an access denied error.

I couldn't see any policies that might affect this behaviour. Is it
hard coded in the OS now?

Any help would be appreciated.
Chris.
 
Re: Performance Monitor Users no longer able to add or remove counters

Hello xtopher,

What OS are you talking about?

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi there,
>
> I recently installed a bunch of windows updates on my development
> server. Since then only users in the Administrators group can add or
> remove performance counters. I realize that this is typically the case
> in real life, you want an administrator to do the install and only add
> or remove counters during an install. But I'm running a continuous
> integration environment with unit tests. Cruise Control runs as a
> service under an non-admin account and must run tests that (you
> guessed it) add and remove performance counters.
>
> I've been playing with the permissions on the registry key:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion
> \Perflib
> to no avail. It completely ignores the permissions set on the key and
> only allows administrators the ability to make changes. Everything
> else gets an access denied error.
> I couldn't see any policies that might affect this behaviour. Is it
> hard coded in the OS now?
>
> Any help would be appreciated.
> Chris.
 
Re: Performance Monitor Users no longer able to add or removecounters

Re: Performance Monitor Users no longer able to add or removecounters

Sorry, good point. This is running on Windows 2003 sp2 (5.2.3790).

Chris.
 
Re: Performance Monitor Users no longer able to add or remove counters

Hello xtopher,

Has the account you are using the right "logon as a batch job"? Have you
tried to add the account to the "Performance Log Users"? If you collect data
from another server, check that the "remote registry service" is running.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Sorry, good point. This is running on Windows 2003 sp2 (5.2.3790).
>
> Chris.
>
 
Re: Performance Monitor Users no longer able to add or removecounters

Re: Performance Monitor Users no longer able to add or removecounters

The user is part of the Performance Monitor Users group. I've checked
that this group has full control rights over the Perf Lib registry
key. It is not a part of the Performance Log Users group.

CruiseControl is running locally and the unit tests are attempting to
add counters to the local system. No remote calls being made.

I just allowed the Performance Monitor Users group to Log On as Batch
Job. That didn't help. I'll try again adding the specific user rather
than the group to the policy.

Chris.
 
Re: Performance Monitor Users no longer able to add or removecounters

Re: Performance Monitor Users no longer able to add or removecounters

No luck adding the specific user to the Log On as Batch Job policy.

Any other ideas?

Chris.
 
Back
Top