Enabling Resource Monitoring on Windows™ Vista, Windows™ 7, and Windows™ Server 2008

The Windows™ Vista, Windows™ 7, and Windows™ Server 2008 operating systems include security features that are not found in previous versions of Windows™. You must adjust the security settings to collect resource monitoring data. To enable the resource monitoring feature on Windows™ Vista, Windows™ 7, or Windows™ Server 2008, you must start the Remote Registry service, disable the remote User Account Control, and configure the firewall.

Procedure

  1. Start the Remote Registry service.
    The Remote Registry service is disabled by default on Windows™ Vista, Windows™ 7, and Windows™ Server 2008. This service must be running to collect resource monitoring data:
    1. Open the Administrative Tools Control Panel.
    2. Open Services.
    3. On the Remote Registry service entry, click Start.
    4. Optional: To launch the Remote Registry service automatically every time the operating system starts, right-click the Remote Registry service, and then click Properties, and set the Startup type to Automatic.
  2. Disable the remote User Access Control (UAC).
    When a user authenticates remotely, the UAC grants the user only standard privileges, even if the supplied credentials are in the Administrators group. To work around this, modify the LocalAccountTokenFilterPolicy registry key:
    1. Click Start > Run, and type regedit to open the Registry Editor.
    2. Navigate to HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System.
    3. Right-click the LocalAccountTokenFilterPolicy key, and select Modify; then change the value to 1.
    4. If the LocalAccountTokenFilterPolicy key does not exist, right-click on the LocalAccountTokenFilterPolicy window, and select New DWord; then type the name LocalAccountTokenFilterPolicy, and set its value to 1.
      Note: To reset these remote authentication settings to their original state, set this key to 0.
    5. Restart the computer.
  3. Configure the firewall.
    The firewall blocks remote administrative requests by default:
    1. Open the Firewall Control Panel.
    2. Click Change settings.
    3. Click the Exceptions tab.
    4. Select the Remote Administration option.
    5. Restart the computer.
  4. Check that the Remote Registry path is accessible.
    1. Open the Administrative Tools Control Panel.
    2. Open Local Security Policy.
    3. Expand Local Policies.
    4. Select Security Options.
    5. In the Policy column, right-click Network access: Remotely accessible registry paths and sub-paths and select Properties.
    6. Ensure that Software\Microsoft\Windows NT\CurrentVersion\Perflib is displayed in the list. If not, add Software\Microsoft\Windows NT\CurrentVersion\Perflib to the list.