Solved

Perfmon not displaying SQL counters remotely for non Admins

Posted on 2007-11-27
8
1,055 Views
Last Modified: 2013-12-05
I have a user that needs to be able to run perfmon remotely to monitor SQL server counters.

I have configured the server as per this article and the user is able to use Perfmon remotely whereas before he would get access denied. We are using SQL and Windows 2000.

http://www.webservertalk.com/archive46-2004-6-289063.html

The problem is that he is unable to see the SQL (or SMS which isn't relevant) counters remotely. When I connect as admin locally and remotely I get the full list of counters from the dropdown list including SQL. This shows it isn't related to the countless issues people have had where SQL counters disappear completely for everyone.

I suspect there is either a registry entry or DLL that needs to give Read access to the user but I have no idea which one it might be. As far as I can tell from following these steps, the user should have read access for all "Services".

I also cannot find an article that tells me how Perfmon works with regard to the counters.
0
Comment
Question by:AWGMorrison
  • 2
  • 2
  • 2
  • +1
8 Comments
 
LVL 31

Expert Comment

by:James Murrell
ID: 20358796
0
 

Author Comment

by:AWGMorrison
ID: 20364461
Thanks for the suggestion. I don't think that really helps but if I am honest I don't really understand a lot of the article as I am not a DBA or a developer.

I am going to post on the MS forums and see if I get any response.
0
 

Accepted Solution

by:
AWGMorrison earned 0 total points
ID: 20364641
I have found the answer:
I have included the whole process but step 5 answers my question. This DLL is what defines the performance counters for SQL and the user needs read access to it.



Procedure for allowing Perfmon to monitor SQL remotely for non admins:

A group has been created in Active directory called "Perfmon Users" where users can be added to to give them access to remotely use Perfmon

1) In Windows Explorer or File Manager, give the user at least READ access to the following files:
%windir%\System32\PERFCxxx.DAT
%windir%\system32\PERFHxxx.DAT

where xxx is the basic language ID for the system, for example, 009 for English.

2) Start Registry Editor (regedt32), and then give the user at least READ access to the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg

3) Give the user at least READ access to the following key and allow
Read permission to propagate down to the Services subkeys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl Set\Services

4) With Windows 2000, in addition to the access described above, the user must also have access granted by the following Group Policies:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Profile System Performance
Profile Single Process

5) Browse to \\Program Files\Microsoft SQL Server\MSSQL\Binn and give the user READ permission on the SQLCTR80.dll
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 
LVL 31

Expert Comment

by:James Murrell
ID: 20364800
cool sorry my link did not solve but glad you found a solution and posted here
0
 
LVL 1

Expert Comment

by:Vee_Mod
ID: 20390968
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
0
 
LVL 1

Expert Comment

by:deshaw
ID: 21872461
After following the above steps, I am able to view the remote machines performace counters except the SQL related counters. I am able to view these SQL counters with admin account.

I am unable to find SQLCTR80.dll in SQL binn directory to give read permissions. I think this could be the reason behind the problem. I am running SQL server 2005 and I don't have this dll inside installation directory.

Any once else faced this problem? Do I need to copy and registrer this dll manually?



0
 
LVL 1

Expert Comment

by:Vee_Mod
ID: 21873269
deshaw,
Please use the 'ask a related question' function and open your own question. Doing so will send an alert to everyone who participated in the question.

The only reward the Experts get for helping you is the electronic 'points' offered with new questions.

You are a Premium Service member with unlimited points - so there is no additional cost to you.

Vee_Mod
Community Support Moderator
0

Featured Post

Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
This article explains how to reset the password of the sa account on a Microsoft SQL Server.  The steps in this article work in SQL 2005, 2008, 2008 R2, 2012, 2014 and 2016.
This video shows, step by step, how to configure Oracle Heterogeneous Services via the Generic Gateway Agent in order to make a connection from an Oracle session and access a remote SQL Server database table.
Viewers will learn how to use the SELECT statement in SQL to return specific rows and columns, with various degrees of sorting and limits in place.

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question