如何更改性能计数器的访问控制列表？

Question

我可以作为管理员在我的服务器上获取性能计数器：

PS C:\Users\Administrator\Documents> Get-Counter '\memory\available bytes'

Timestamp                 CounterSamples                                                                                      
---------                 --------------                                                                                      
28.04.2014 5:19:55        \\vm108838-2\memory\available bytes :                                                               
                          393011200

但是当我尝试从非管理员用户那里获取性能计数器时，我收到以下错误：

PS C:\Users\lpu3\Documents> Get-Counter '\memory\available bytes'
Get-Counter : Unable to connect to the specified computer or the computer is offline.
    + CategoryInfo          : InvalidResult: (:) [Get-Counter], Exception
    + FullyQualifiedErrorId : CounterApiError,Microsoft.PowerShell.Commands.GetCounterCommand

Documentation 状态：

性能计数器通常受访问控制列表 (ACL) 保护。要获取所有可用的性能计数器，请使用“以管理员身份运行”选项打开 Windows PowerShell。

那么，问题是，我可以在哪里更改该 ACL 以包含我的用户？

Answer 1

不要更改 ACL。将用户帐户添加到 a group that has permissions 以使用性能监视器日志。根据文档：

Members of the Performance Monitor Users group 
• Can use all the features that are available to the Users group.
• Can view real-time performance data in Performance Monitor, and can change the Performance Monitor display properties while viewing real-time data. 
• Cannot create or modify Data Collector Sets.


Members of the Performance Log Users group
• Can use all the features that are available to the Performance Monitor Users group.
• Can create and modify Data Collector Sets after the group is assigned the Log on as a batch user user right, as described in Enable Logging for Performance Log Users Group Members.
• Cannot use the Windows Kernel Trace provider in Data Collector Sets.