Performance counter failed

Nadir · Post by **Nadir** » Mon Nov 13, 2006 9:57 am

Hi all,

It's very strange, when AHM is started as service all perfmon counter tests failed.
I specified admin accout in "Log on as" in menu option, but reply test display "error unable to connect to specified machine or machine is offline"
And when I edit test and click on "get current value" i have a good value in reply field.

I have the same problem with and without RMA!!
Note: NT Events logs tests woks fine, thus it is not a security problem

Please help rapidly

KS-Soft · Post by **KS-Soft** » Mon Nov 13, 2006 12:55 pm

And when I edit test and click on "get current value" i have a good value in reply field

Probably you are using RCC to click that button?

I specified admin accout in "Log on as" in menu option, but reply test display "error unable to connect to specified machine or machine is offline"

Could you please check system log? Do you see message like "Logged on as user .." or "Cannot logon as user ..."?

Note: NT Events logs tests woks fine, thus it is not a security problem

Why not? Performance Counter requires admin rights, while NT Event Log test may work using Power User account.

Please help rapidly

Microsoft implementation of Performance Counters is not reliable. We recommend to use WMI instead, it works much better

Regards
Alex

Nadir · Post by **Nadir** » Tue Nov 14, 2006 2:39 am

Probably you are using RCC to click that button?

Exact

Could you please check system log? Do you see message like "Logged on as user .." or "Cannot logon as user ..."?

no logs

Why not? Performance Counter requires admin rights, while NT Event Log test may work using Power User account.

Is cpu usage test required Admin rights?

I have two similar test, the first working with RMA and the second working with AHM. The two test use the same account but why the first (using RMA) failed?

Thanks Nadir

KS-Soft Europe · Post by **KS-Soft Europe** » Tue Nov 14, 2006 3:07 am

Nadir wrote:
Could you please check system log? Do you see message like "Logged on as user .." or "Cannot logon as user ..."?
no logs

"Logged on as user .." message should appear in the System Event Log, not in HostMonitor's log. You may use standard Windows Event Viewer to check System event Log.

Nadir wrote:Is cpu usage test required Admin rights?

Correct. CPU usage test requires admin account on the system it checks.

Nadir wrote:I have two similar test, the first working with RMA and the second working with AHM. The two test use the same account but why the first (using RMA) failed?

RMA service should be started under admin account. You may specify account for RMA service using Services applet (Start > Run > services.msc > KS Remote Monitoring Agent > Log On tab)

Regards,
Max

Nadir · Post by **Nadir** » Tue Nov 14, 2006 4:49 am

RMA service should be started under admin account. You may specify account for RMA service using Services applet (Start > Run > services.msc > KS Remote Monitoring Agent > Log On tab)

Thanks, all tests through RMA works fine now.
But several tests through AHM (in service mode) failed and in application mode works!!

Ex: In service mode I have 1 CPU usage test and it works and I have 1 Perfmon test and it doesn't works. In event log no audit security failure

In application mode the 2 tests works fine!!, and in event log I can see security failure initiated by local account where is started AHM (tests using Connection manager)

The question is why AHM use local account in application mode and why is he works fine in application mode and failed in service mode?

Are they use the same login and password from Connection Manager?
Thanks for answers

KS-Soft Europe · Post by **KS-Soft Europe** » Tue Nov 14, 2006 5:18 am

Nadir wrote:But several tests through AHM (in service mode) failed and in application mode works!!

I think, you should assign "Logon as service" privilege to the account, you have specified in Options > Service tab. You may do it using Local Security Policy applet (Start > Run > secpol.msc): Security Settings > Local Policies > User Right Assignment > Logon as service .

Do not forget restart the service, please.

Regards,
Max

Nadir · Post by **Nadir** » Tue Nov 14, 2006 5:21 am

I think, you should assign "Logon as service" privilege to the account, you have specified in Options > Service tab. You may do it using Local Security Policy applet (Start > Run > secpol.msc): Security Settings > Local Policies > User Right Assignment > Logon as service (just add the account there).

I monitor several networks and they don't use the same login and password.

If I do what you say all test wil use the same account, no?

KS-Soft Europe · Post by **KS-Soft Europe** » Tue Nov 14, 2006 5:33 am

Nadir wrote:I monitor several networks and they don't use the same login and password. If I do what you say all test wil use the same account, no?

No, it is not necessary. You just should assign "Logon as service" privilege to the account, that is used to start service.
Accounts you have specified into Connection Manager or Connect as box, also require "Logon as service" priviledge on remote machines. To make test works in service mode, you should assign "Logon as service" priviledge to the appropriate account on certain remote machine. Windows uses a bit different authentification mechanism for services, because service works when you are logged in and it works after you are logged off either.

Regards,
Max

Nadir · Post by **Nadir** » Tue Nov 14, 2006 7:44 am

I think, you should assign "Logon as service" privilege to the account, you have specified in Options > Service tab. You may do it using Local Security Policy applet (Start > Run > secpol.msc): Security Settings > Local Policies > User Right Assignment > Logon as service .

ok but always the same problem.

Windows uses a bit different authentification mechanism for services, because service works when you are logged in and it works after you are logged off either

Ok but why cpu usage tests works and perfon test doesn't? (service mode)
And Why test initiated by RMA works and with AHM doesn't (service mode)

It's not coherent

Nadir · Post by **Nadir** » Tue Nov 14, 2006 9:37 am

Hi

I have restart machine and problem disappear
Very strange...
Thanks for help

KS-Soft · Post by **KS-Soft** » Tue Nov 14, 2006 10:34 am

Alex: Probably you are using RCC to click that button?
Nadir:Exact

This means RCC (started as application) request the information, not HostMonitor (HostMonitor performs the tests, but GUI operations processed by RCC)

I have restart machine and problem disappear
Very strange...

That's Windows.. nobody knows exactly how it works. Except Microsoft

Regards
Alex