B
Brent Wege
I have seen several instances of KB articles that I have used many
times in the past that are no longer on MS site. Why do they do
this???
This q158438 for remote perfmon access to win2k machines is ONE
example... so much for relying on MS to keep the answers to our
problems on their site... is this to boost their P$$ income, or in
this case, to promote upgrading to Win2K3/XP which has remote perfmon
access already built in?? I find it questionable that they do stuff
like this.
Example:
http://support.microsoft.com/default.aspx?scid=KB;en-us;q158438
Per the above Microsoft article, the following 5 steps need to be
performed:
1) In Windows Explorer or File Manager, give the user at least READ
access to the following files:
%windir%\System32\PERFCxxx.DAT
%windir%\system32\PERFHxxx.DAT
where xxx is the basic language ID for the system, for example, 009
for English. These files may be missing or corrupted. If you suspect
this, expand these files off of the installation CD.
2) Start Registry Editor, and then give the user at least READ access
to the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
3) Give the user at least READ access to the following key and allow
Read permission to propagate down to the Services subkeys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
4) With Windows 2000, in addition to the access described above, the
user must also have access granted by the following Group Policies:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment
Profile System Performance
Profile Single Process
5) If the user is neither a power user or an administrator, additional
permissions might be needed to access SysMonLog services. To grant
full access to SysMonLog services, run the subinacl /service sysmonlog
/grant=tester=f command, where tester is the user account.
I have over 100 Windows 2000 servers to configure. Is there any way
the above 5 steps can be done via script? Batch file, VB, VBScript,
etc. If anyone can put together a script for me without too much
trouble, I'd greatly appreciate it.
BTW I'll be configuring the rights for a local group, not a User.
Thanks in advance!
Dave
times in the past that are no longer on MS site. Why do they do
this???
This q158438 for remote perfmon access to win2k machines is ONE
example... so much for relying on MS to keep the answers to our
problems on their site... is this to boost their P$$ income, or in
this case, to promote upgrading to Win2K3/XP which has remote perfmon
access already built in?? I find it questionable that they do stuff
like this.
Example:
http://support.microsoft.com/default.aspx?scid=KB;en-us;q158438
Per the above Microsoft article, the following 5 steps need to be
performed:
1) In Windows Explorer or File Manager, give the user at least READ
access to the following files:
%windir%\System32\PERFCxxx.DAT
%windir%\system32\PERFHxxx.DAT
where xxx is the basic language ID for the system, for example, 009
for English. These files may be missing or corrupted. If you suspect
this, expand these files off of the installation CD.
2) Start Registry Editor, and then give the user at least READ access
to the following registry keys:
HKEY_LOCAL_MACHINE\Software\Microsoft\WindowsNT\CurrentVersion\Perflib
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\Winreg
3) Give the user at least READ access to the following key and allow
Read permission to propagate down to the Services subkeys:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
4) With Windows 2000, in addition to the access described above, the
user must also have access granted by the following Group Policies:
Computer Configuration\Windows Settings\Security Settings\Local
Policies\User Rights Assignment
Profile System Performance
Profile Single Process
5) If the user is neither a power user or an administrator, additional
permissions might be needed to access SysMonLog services. To grant
full access to SysMonLog services, run the subinacl /service sysmonlog
/grant=tester=f command, where tester is the user account.
I have over 100 Windows 2000 servers to configure. Is there any way
the above 5 steps can be done via script? Batch file, VB, VBScript,
etc. If anyone can put together a script for me without too much
trouble, I'd greatly appreciate it.
BTW I'll be configuring the rights for a local group, not a User.
Thanks in advance!
Dave