1

My DBA team doesn't have access to SQL server 2005 standard performance counters.

What is the required permission that they should be granted? I found some registry entries, but they already have permissions there. they're not OS administrators.

Nick Kavadias
  • 10,758
  • 7
  • 36
  • 47
  • Does your DBA team need to view output from existing performance counters, or do they need to add / remove performance counters? On which version of Windows is the SQL Server 2005 running? – Eric H Nov 04 '09 at 03:12
  • They need to view output of existing performance counters. I have this situation on Standard and Enterprise edition on 3 different machines. Lots of other machines (installed from the same media) don't have that problem. –  Nov 13 '09 at 11:28

2 Answers2

1

Are you speaking of the sys.dm_os_performance_counters DMV ?
You need to grant the SQL Server login the VIEW SERVER STATE permission.

GRANT VIEW SERVER STATE to [performance_user]

This will also give the user account access to all other DMV's, & may not be granular enough. Simply granting SELECT permission on the view doesn't work!!

If you want to do this outside of SQL Server & use the Performance Monitor mmc, then look at this MSKB article. You will need to modify some file level permissions & registry level permissions on the server:

If the systemroot is on an NTFS partition, you must have at least Read access to the following two files:

  • %SystemRoot%\System32\Perfc009.dat
  • %SystemRoot%\System32\Perfh009.dat

You must have at least Read access to the following registry keys on the remote computer:

  • HKEYLM\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg
  • HKEYLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Perflib

You must have Full access to the following registry key on the remote computer:

  • HKEYLM\SYSTEM\CurrentControlSet\services\servicename\performance
Jeff Atwood
  • 12,994
  • 20
  • 74
  • 92
Nick Kavadias
  • 10,758
  • 7
  • 36
  • 47
  • I meant the performance monitor. I checked the permissions and those guys already have read access in that points. –  Nov 04 '09 at 12:04
0

Is the remote registry service running on the affected machines? Also, add the domain user accounts for the DBA's (or better yet, create a domain group for the DBA's) and add the domain users or group to the local Performance Monitor Users group.

joeqwerty
  • 108,377
  • 6
  • 80
  • 171