• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1068
  • Last Modified:

Perfmon not displaying SQL counters remotely for non Admins

I have a user that needs to be able to run perfmon remotely to monitor SQL server counters.

I have configured the server as per this article and the user is able to use Perfmon remotely whereas before he would get access denied. We are using SQL and Windows 2000.

http://www.webservertalk.com/archive46-2004-6-289063.html

The problem is that he is unable to see the SQL (or SMS which isn't relevant) counters remotely. When I connect as admin locally and remotely I get the full list of counters from the dropdown list including SQL. This shows it isn't related to the countless issues people have had where SQL counters disappear completely for everyone.

I suspect there is either a registry entry or DLL that needs to give Read access to the user but I have no idea which one it might be. As far as I can tell from following these steps, the user should have read access for all "Services".

I also cannot find an article that tells me how Perfmon works with regard to the counters.
0
AWGMorrison
Asked:
AWGMorrison
  • 2
  • 2
  • 2
  • +1
1 Solution
 
James MurrellProduct SpecialistCommented:
0
 
AWGMorrisonAuthor Commented:
Thanks for the suggestion. I don't think that really helps but if I am honest I don't really understand a lot of the article as I am not a DBA or a developer.

I am going to post on the MS forums and see if I get any response.
0
 
AWGMorrisonAuthor Commented:
I have found the answer:
I have included the whole process but step 5 answers my question. This DLL is what defines the performance counters for SQL and the user needs read access to it.



Procedure for allowing Perfmon to monitor SQL remotely for non admins:

A group has been created in Active directory called "Perfmon Users" where users can be added to to give them access to remotely use Perfmon

1) In Windows Explorer or File Manager, give the user at least READ access to the following files:
%windir%\System32\PERFCxxx.DAT
%windir%\system32\PERFHxxx.DAT

where xxx is the basic language ID for the system, for example, 009 for English.

2) Start Registry Editor (regedt32), and then give the user at least READ access to the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg

3) Give the user at least READ access to the following key and allow
Read permission to propagate down to the Services subkeys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl Set\Services

4) With Windows 2000, in addition to the access described above, the user must also have access granted by the following Group Policies:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Profile System Performance
Profile Single Process

5) Browse to \\Program Files\Microsoft SQL Server\MSSQL\Binn and give the user READ permission on the SQLCTR80.dll
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
James MurrellProduct SpecialistCommented:
cool sorry my link did not solve but glad you found a solution and posted here
0
 
Vee_ModCommented:
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
0
 
deshawCommented:
After following the above steps, I am able to view the remote machines performace counters except the SQL related counters. I am able to view these SQL counters with admin account.

I am unable to find SQLCTR80.dll in SQL binn directory to give read permissions. I think this could be the reason behind the problem. I am running SQL server 2005 and I don't have this dll inside installation directory.

Any once else faced this problem? Do I need to copy and registrer this dll manually?



0
 
Vee_ModCommented:
deshaw,
Please use the 'ask a related question' function and open your own question. Doing so will send an alert to everyone who participated in the question.

The only reward the Experts get for helping you is the electronic 'points' offered with new questions.

You are a Premium Service member with unlimited points - so there is no additional cost to you.

Vee_Mod
Community Support Moderator
0

Featured Post

Prep for the ITIL® Foundation Certification Exam

December’s Course of the Month is now available! Enroll to learn ITIL® Foundation best practices for delivering IT services effectively and efficiently.

  • 2
  • 2
  • 2
  • +1
Tackle projects and never again get stuck behind a technical roadblock.
Join Now