question

MattJukes-7714 avatar image
0 Votes"
MattJukes-7714 asked ·

Performance Monitor & Access Denied

Good Afternoon,

I'll try to be as concise as possible but I apologise now if I ramble-on.

I would like to create a single user to view/create/start/stop Data Collection Sets in Performance Monitor.

I have a workgroup PC, running Windows 10 Pro

I created a standard user - Bob

Bob is a member of;
Users
Performance Log Users

Log on as a Batch Job - LGPO includes;
Administrators
Backup Operators
Bob
Performance Log Users

I login to Bob's profile and open Performance Monitor

I right-click the Performance Monitor and choose New - then proceed to create a new DCS

When I reach the run as portion, I enter Bob's credentials.

I click Finish and receive an Access Denied error.

Put plainly, Why?

Is this because it's local? On a workgroup and not a domain? Do I have to add more permissions to Bob? Is this just not possible?

I appreciate your time for taking a look. Have a nice day.

Matt.

windows-10-general
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

SSengupta-4080 avatar image
1 Vote"
SSengupta-4080 answered ·

To resolve the problem, add your user account to both the Performance Monitor Users group and the Performance Log Users group on the remote computer that you want to access.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MattJukes-7714 avatar image
0 Votes"
MattJukes-7714 answered ·

Thank you @SSengupta-4080 for your response.

Unfortunately, the reason I'm asking the question and testing this functionality is for a question I've been given in relation to a Microsoft exam.

The question asks for which group (only 1) should a user be placed in to be able to create/manage DCS's

However, I tried your suggestion, and as I expected, it still didn't work. When I try to "Finish" (Save) the new DCS it errors with Access is Denied.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MotoX80 avatar image
0 Votes"
MotoX80 answered ·

When I reach the run as portion, I enter Bob's credentials.

The question asks for which group (only 1) should a user be placed in to be able to create/manage DCS's


Why are you entering Bob in the runas field if the question just asks about creating/managing DSC's? Does the question specifically mention runas? Maybe you're reading too much into the question.

From my real world experience, I can't remember ever needing to use a different (non default) account when logging. Maybe if you wanted to put the files on a network share would be a reason. The default is SYSTEM, so I would think that Bob would need to be an administrator for runas to work, but I haven't tested that.

The permissions on C:\Perflogs shows "BUILTIN\Performance Log Users:(OI)(RX,WD,AD)" so that would be my answer.

·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

MattJukes-7714 avatar image
0 Votes"
MattJukes-7714 answered ·

Hi @MotoX80 and thank you for your reply.

You are right on that, of course. Performance Log Users is most definitely what I would expect to be the correct answer. The issue is, that I can't get it to work.

I have changed the "Run as" option and left it as Default, and it still doesn't work for me, which is why I think I must be doing something wrong.

I hate just accepting an answer, I always prefer to see it working, but with this one I just give up.

· 2 ·
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

It's not working for me either. Might be a bug. Or an "enhancement". It could be that no one has noticed that it doesn't work because most users who would want to set up a DCS are administrators.

0 Votes 0 ·

haha, well, at least I'm not completely insane :D

I understand it should be Performance Log Users, so I'm happy-ish. I would have liked to see it work, but I guess another time.

Thank you

0 Votes 0 ·