Performance Monitor & Access Denied

MattJukes-7714 21 Reputation points
2021-03-06T13:48:02.303+00:00

Good Afternoon,

I'll try to be as concise as possible but I apologise now if I ramble-on.

I would like to create a single user to view/create/start/stop Data Collection Sets in Performance Monitor.

I have a workgroup PC, running Windows 10 Pro

I created a standard user - Bob

Bob is a member of;
Users
Performance Log Users

Log on as a Batch Job - LGPO includes;
Administrators
Backup Operators
Bob
Performance Log Users

I login to Bob's profile and open Performance Monitor

I right-click the Performance Monitor and choose New - then proceed to create a new DCS

When I reach the run as portion, I enter Bob's credentials.

I click Finish and receive an Access Denied error.

Put plainly, Why?

Is this because it's local? On a workgroup and not a domain? Do I have to add more permissions to Bob? Is this just not possible?

I appreciate your time for taking a look. Have a nice day.

Matt.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,673 questions
0 comments

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. S.Sengupta 15,416 Reputation points MVP
    2021-03-06T15:07:29.937+00:00

    To resolve the problem, add your user account to both the Performance Monitor Users group and the Performance Log Users group on the remote computer that you want to access.

    1 person found this answer helpful.
    0 comments
  2. MattJukes-7714 21 Reputation points
    2021-03-06T16:49:34.593+00:00

    Thank you @S.Sengupta for your response.

    Unfortunately, the reason I'm asking the question and testing this functionality is for a question I've been given in relation to a Microsoft exam.

    The question asks for which group (only 1) should a user be placed in to be able to create/manage DCS's

    However, I tried your suggestion, and as I expected, it still didn't work. When I try to "Finish" (Save) the new DCS it errors with Access is Denied.

    0 comments
  3. MotoX80 31,976 Reputation points
    2021-03-06T17:51:58.757+00:00

    When I reach the run as portion, I enter Bob's credentials.

    The question asks for which group (only 1) should a user be placed in to be able to create/manage DCS's

    Why are you entering Bob in the runas field if the question just asks about creating/managing DSC's? Does the question specifically mention runas? Maybe you're reading too much into the question.

    From my real world experience, I can't remember ever needing to use a different (non default) account when logging. Maybe if you wanted to put the files on a network share would be a reason. The default is SYSTEM, so I would think that Bob would need to be an administrator for runas to work, but I haven't tested that.

    The permissions on C:\Perflogs shows "BUILTIN\Performance Log Users:(OI)(RX,WD,AD)" so that would be my answer.

    0 comments
  4. MattJukes-7714 21 Reputation points
    2021-03-07T09:28:31.267+00:00

    Hi @MotoX80 and thank you for your reply.

    You are right on that, of course. Performance Log Users is most definitely what I would expect to be the correct answer. The issue is, that I can't get it to work.

    I have changed the "Run as" option and left it as Default, and it still doesn't work for me, which is why I think I must be doing something wrong.

    I hate just accepting an answer, I always prefer to see it working, but with this one I just give up.