Performance Monitor Users no longer able to add or remove counters

[Guest xtopher]

Hi there,

 

I recently installed a bunch of windows updates on my development

server. Since then only users in the Administrators group can add or

remove performance counters. I realize that this is typically the case

in real life, you want an administrator to do the install and only add

or remove counters during an install. But I'm running a continuous

integration environment with unit tests. Cruise Control runs as a

service under an non-admin account and must run tests that (you

guessed it) add and remove performance counters.

 

I've been playing with the permissions on the registry key:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

\Perflib

to no avail. It completely ignores the permissions set on the key and

only allows administrators the ability to make changes. Everything

else gets an access denied error.

 

I couldn't see any policies that might affect this behaviour. Is it

hard coded in the OS now?

 

Any help would be appreciated.

Chris.

[Guest Meinolf Weber]

Re: Performance Monitor Users no longer able to add or remove counters

 

Hello xtopher,

 

What OS are you talking about?

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Hi there,

>

> I recently installed a bunch of windows updates on my development

> server. Since then only users in the Administrators group can add or

> remove performance counters. I realize that this is typically the case

> in real life, you want an administrator to do the install and only add

> or remove counters during an install. But I'm running a continuous

> integration environment with unit tests. Cruise Control runs as a

> service under an non-admin account and must run tests that (you

> guessed it) add and remove performance counters.

>

> I've been playing with the permissions on the registry key:

> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion

> \Perflib

> to no avail. It completely ignores the permissions set on the key and

> only allows administrators the ability to make changes. Everything

> else gets an access denied error.

> I couldn't see any policies that might affect this behaviour. Is it

> hard coded in the OS now?

>

> Any help would be appreciated.

> Chris.

[Guest xtopher]

Re: Performance Monitor Users no longer able to add or removecounters

 

Re: Performance Monitor Users no longer able to add or removecounters

 

Sorry, good point. This is running on Windows 2003 sp2 (5.2.3790).

 

Chris.

[Guest Meinolf Weber]

Re: Performance Monitor Users no longer able to add or remove counters

 

Hello xtopher,

 

Has the account you are using the right "logon as a batch job"? Have you

tried to add the account to the "Performance Log Users"? If you collect data

from another server, check that the "remote registry service" is running.

 

Best regards

 

Meinolf Weber

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

** Please do NOT email, only reply to Newsgroups

** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> Sorry, good point. This is running on Windows 2003 sp2 (5.2.3790).

>

> Chris.

>

[Guest xtopher]

Re: Performance Monitor Users no longer able to add or removecounters

 

Re: Performance Monitor Users no longer able to add or removecounters

 

The user is part of the Performance Monitor Users group. I've checked

that this group has full control rights over the Perf Lib registry

key. It is not a part of the Performance Log Users group.

 

CruiseControl is running locally and the unit tests are attempting to

add counters to the local system. No remote calls being made.

 

I just allowed the Performance Monitor Users group to Log On as Batch

Job. That didn't help. I'll try again adding the specific user rather

than the group to the policy.

 

Chris.

[Guest xtopher]

Re: Performance Monitor Users no longer able to add or removecounters

 

Re: Performance Monitor Users no longer able to add or removecounters

 

No luck adding the specific user to the Log On as Batch Job policy.

 

Any other ideas?

 

Chris.