Solved

Perfmon not displaying SQL counters remotely for non Admins

Posted on 2007-11-27
8
1,048 Views
Last Modified: 2013-12-05
I have a user that needs to be able to run perfmon remotely to monitor SQL server counters.

I have configured the server as per this article and the user is able to use Perfmon remotely whereas before he would get access denied. We are using SQL and Windows 2000.

http://www.webservertalk.com/archive46-2004-6-289063.html

The problem is that he is unable to see the SQL (or SMS which isn't relevant) counters remotely. When I connect as admin locally and remotely I get the full list of counters from the dropdown list including SQL. This shows it isn't related to the countless issues people have had where SQL counters disappear completely for everyone.

I suspect there is either a registry entry or DLL that needs to give Read access to the user but I have no idea which one it might be. As far as I can tell from following these steps, the user should have read access for all "Services".

I also cannot find an article that tells me how Perfmon works with regard to the counters.
0
Comment
Question by:AWGMorrison
  • 2
  • 2
  • 2
  • +1
8 Comments
 
LVL 31

Expert Comment

by:James Murrell
Comment Utility
0
 

Author Comment

by:AWGMorrison
Comment Utility
Thanks for the suggestion. I don't think that really helps but if I am honest I don't really understand a lot of the article as I am not a DBA or a developer.

I am going to post on the MS forums and see if I get any response.
0
 

Accepted Solution

by:
AWGMorrison earned 0 total points
Comment Utility
I have found the answer:
I have included the whole process but step 5 answers my question. This DLL is what defines the performance counters for SQL and the user needs read access to it.



Procedure for allowing Perfmon to monitor SQL remotely for non admins:

A group has been created in Active directory called "Perfmon Users" where users can be added to to give them access to remotely use Perfmon

1) In Windows Explorer or File Manager, give the user at least READ access to the following files:
%windir%\System32\PERFCxxx.DAT
%windir%\system32\PERFHxxx.DAT

where xxx is the basic language ID for the system, for example, 009 for English.

2) Start Registry Editor (regedt32), and then give the user at least READ access to the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg

3) Give the user at least READ access to the following key and allow
Read permission to propagate down to the Services subkeys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl Set\Services

4) With Windows 2000, in addition to the access described above, the user must also have access granted by the following Group Policies:
Computer Configuration\Windows Settings\Security Settings\Local Policies\User Rights Assignment
Profile System Performance
Profile Single Process

5) Browse to \\Program Files\Microsoft SQL Server\MSSQL\Binn and give the user READ permission on the SQLCTR80.dll
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 
LVL 31

Expert Comment

by:James Murrell
Comment Utility
cool sorry my link did not solve but glad you found a solution and posted here
0
 
LVL 1

Expert Comment

by:Vee_Mod
Comment Utility
Closed, 500 points refunded.
Vee_Mod
Community Support Moderator
0
 
LVL 1

Expert Comment

by:deshaw
Comment Utility
After following the above steps, I am able to view the remote machines performace counters except the SQL related counters. I am able to view these SQL counters with admin account.

I am unable to find SQLCTR80.dll in SQL binn directory to give read permissions. I think this could be the reason behind the problem. I am running SQL server 2005 and I don't have this dll inside installation directory.

Any once else faced this problem? Do I need to copy and registrer this dll manually?



0
 
LVL 1

Expert Comment

by:Vee_Mod
Comment Utility
deshaw,
Please use the 'ask a related question' function and open your own question. Doing so will send an alert to everyone who participated in the question.

The only reward the Experts get for helping you is the electronic 'points' offered with new questions.

You are a Premium Service member with unlimited points - so there is no additional cost to you.

Vee_Mod
Community Support Moderator
0

Featured Post

Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

Join & Write a Comment

Suggested Solutions

Nowadays, some of developer are too much worried about data. Who is using data, who is updating it etc. etc. Because, data is more costlier in term of money and information. So security of data is focusing concern in days. Lets' understand the Au…
Everyone has problem when going to load data into Data warehouse (EDW). They all need to confirm that data quality is good but they don't no how to proceed. Microsoft has provided new task within SSIS 2008 called "Data Profiler Task". It solve th…
Using examples as well as descriptions, and references to Books Online, show the different Recovery Models available in SQL Server and explain, as well as show how full, differential and transaction log backups are performed
Via a live example, show how to setup several different housekeeping processes for a SQL Server.

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now