Re: [ActiveDir] permon access

[Tom Kern]

That works except when the user tries to create a counter log.

The log doesn't start and when an attempt is made to start it, the user gets an event id 2046.

 

The soultion here-

http://eventid.net/display.asp?eventid=2046&eventno=2556&source=SysmonLog&phase=1

 

says to allow the Performance Logs and Alerts service on the local box to use an account that has the "logon as service" right on the remote server.

 

Is this my only solution?

Thanks

 

On 2/13/06, Coleman, Hunter <[EMAIL PROTECTED]> wrote:

http://support.microsoft.com/?kbid=300702  if you have 2k3 members

---

From: [EMAIL PROTECTED] [mailto: [EMAIL PROTECTED]] On Behalf Of Tom Kern
Sent: Monday, February 13, 2006 9:04 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] permon access

 

Sorry,

 

member servers.

remotely.

 

Thanks

 

On 2/13/06, Tom Kern <[EMAIL PROTECTED] > wrote:

Thank you very much!!

 

Thats exactly what I was looking for...

 

On 2/13/06, Olivarez, Sergio J Mr ANOSC/FCBS < [EMAIL PROTECTED]> wrote:

Yeah sorry bout that!  I realized that after I had already sent it.  Check out the links below maybe they will help!

http://www.windowsitpro.com/WindowsSecurity/Article/ArticleID/16529/16529.html

http://support.microsoft.com/default.aspx?scid=kb;en-us;164018

 

 

Thanks... ... ... ...

Sergio J. Olivarez - Contractor

GD-NS

---

From: Tom Kern [mailto: [EMAIL PROTECTED]]
Sent: Monday, February 13, 2006 8:36 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] permon access

 

Thats why i stated I was on a windows 2000 Forest.

 

That group is only available on Wink23 dc's.

 

Thanks

 

On 2/13/06, Olivarez, Sergio J Mr ANOSC/FCBS < [EMAIL PROTECTED]> wrote:

How about utilizing the "Performance Monitor Users" built-in security group!

 

Thanks... ... ... ...

Sergio J. Olivarez - Contractor

GD-NS

---

From: Tom Kern [mailto: [EMAIL PROTECTED]]
Sent: Monday, February 13, 2006 8:14 AM
To: activedirectory
Subject: [ActiveDir] permon access

 

In windows 2000 Forest, what are the bare minium rights needed for a user to run perfmon?

 

I'd like to delegate this to someone without making them a local admin on the box.

Is this possible?

 

I can't seem to find a gpo adm template that allows this for win2k.

 

Thanks