What are the minimum privileges required to allow the SAM module to monitor PerfMon counters on a remote machine?
When monitoring a machine via Perfmon the user account used for monitoring must be a member of the Performance Monitor Users group, Performance Log Users group, Administrators group, or equivalent on the machine being monitored; as detailed in the following Microsoft KB: http://technet.microsoft.com/en-us/library/cc727159.aspx
Internal testing by Borland has also found that the following permissions are also required in order for Silk Performer SAM to monitor via PerfMon.
- READ access to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Perflib and all subkeys of that key.
- READ access to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\SecurePipeServers\winreg.
- "Access this computer from the network" under CONTROL PANEL | ADMINISTRATIVE TOOLS | LOCAL SECURITY SETTINGS | USER RIGHTS ASSIGNMENT
- If monitoring a Windows 2000 machine the Remote Registry Service must also be running on it. It can be found under CONTROL PANEL | ADMINISTRATIVE TOOLS | SERVICES
If using Windows 2000 or NT4 you must add permissions through the Regedt32 command, rather than regedit. If these permissions are not enabled then you may receive one of the following errors.
- PDH: 1 - The return data value is valid and different from the last sample.
This will be displayed in the Error window and all measures will have a NULL value; Implies that permission has not been granted to the Perflib key
- Can not connect to performance data on "MachineName" with provided data! SYSTEM: 997 - Overlapped I/O operation is in progress.
Implies that permission has not been granted to the winreg key.
- Can not connect to performance data on "machinename" with provided data! System: 1326 - Logon failure: unknown user or bad password. or System: 1385 - Logon failure: the user has not been granted the requested logon type at this computer
Implies that the user cannot "Access this computer from the network" or Remote registry Service is not running
Computer Name Not Found
Note: If you are unable to monitor the remote machine using PerfMon then you will not be able to do so from SAM, and you should contact your IS department to facilitate this. To test with PerfMon you should
- Open a command prompt
- Type PerfMon
- Select the cross above the graph (it will say "Add" if you hold your cursor over it)
- Enter your MachineName and press enter.
- Then select the specific counter you are interested in.
- Click on Add
This resolution has been tested with Windows NT4, 2000, XP and 2003.
For information on the permissions required to monitor Windows Server 2008 systems in Silk Performance Explorer, please click here.