Permissions Issue with Files Generated by PerfMon

Posted by SvrGuy on Server Fault See other posts from Server Fault or by SvrGuy
Published on 2012-11-26T17:02:18Z Indexed on 2012/11/26 17:06 UTC
Read the original article Hit count: 205

Filed under:
|
|

We are trying to implement some data logging to CSV files using a Data Collector Set in PerfMon (on a windows Server 2008R2 system).

The issue we are running into is that we (seemingly) can't control the permissions being set on the log files created by perfmon.

What we want is for the log files created by perfmon to have Everyone:F permissions (Full Control for Everyone). So, we have a directory structure setup where all logs go into a folder:

c:\vms\PerfMonLogs\%MACHINENAME% (e.g. c:\vms\PerfMonLogs\EvaluationG2)

In the above example, c:\vms\PerfMonLogs\EvaluationG2 has permissions Everyone:F (below is the icacls for this directory)

EVALUATIONG2/ Everyone:(OI)(CI)(F) NT AUTHORITY\SYSTEM:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) BUILTIN\Performance Log Users:(OI)(R)

When the data collector set runs, it creates new sub folders and files within c:\vms\PerfMonLogs\EvaluationG2, e.g. (C:\vms\PerfMonLogs\EVALUATIONG2\M11d26y2012N3)

Each of these directories and files has the following permissions:

M11d26y2012N3 NT AUTHORITY\SYSTEM:(OI)(CI)(F) BUILTIN\Administrators:(OI)(CI)(F) BUILTIN\Performance Log Users:(OI)(R)

So these new folders and not simply inheriting permissions from the parent folder (don't know why).

Now, we tried adding Everyone:F using the security tab on the collector set (No dice).

Any ideas? How do we control the permissions on the log files generated by perfmon data collector set?

© Server Fault or respective owner

Related posts about Windows

Related posts about perfmon