Hi!
I have a problem reading counters in certain performance objects when the
user performing the check is not a member of the local administrators group.
My test setup:
- In a Win2003 active directory, I have 2 member servers
- 1 server running Windows Media Services (Win2003)
- 1 server monitoring other servers through perf counters (Win2k)
- I have 1 domain user who is a member of the local "Performance Monitor
Users" and "Administrators" groups on the Win Media Services server.
Logged on to the monitoring server with the credentials of the domain user
mentioned above, I start perfmon.exe, click "Add" and connect to the Win
Media Services server.
In the "Performance object" drop-down menu, I see a lot of objects, among
them:
- Terminal Services
- Terminal Services Session
- Windows Media Publishing Points
- Windows Media Services
- WMI Objects
I close perfmon.exe and remove the domain user from the local Administrators
group on the Win Media Services server. I restart perfmon.exe on the
monitoring server as described above, and all the performance objects
mentioned above are gone (there might be more objects gone, but my main
concern is with the "Windows Media" objects - I just noticed the others since
they where toward the end of the list, too).
It's obvious that just being member of the local Performance Monitor Users
group is not enough to read all performance counters. What permissions do I
have to grant the domain user in order to access the performance counters in
the two Windows Media performance objects? Is there an overview somewhere of
the permissions needed to monitor other objects?
Regards,
Steinar Skjelanger