Log Is Not Started When You Try to Start a Log with Remote Counters in System Monitor

When you attempt to start a log with remote counters in System Monitor, the log may not be started. The lack of success starting the log may generate the following two events in the Event Viewer Application log: When you attempt to start a performance log, the following message may be displayed :

By default, the Performance Logs and Alerts service is started under the local computer's "system" account. Normally, the "system" account only has permission to access services and resources on the local computer, not logs on network computers.

To start the Performance Logs and Alerts service under a different account:

1. Right-click My Computer, and then click Manage.
2. Open Services and Applications.
3. Click Services.
4. Right-click Performance Logs and Alerts, then click Properties.
5. Click the Log On tab, and then click This account.
6. Type a user account, and then type a password with sufficient credentials to gain access to the remote computer.

This behavior is by design. As a result of the stronger security implemented in Windows 2000, the remote computer only enables a network connection for user accounts with sufficient permissions. The credentials of the System account do not have sufficient permissions. In order to monitor remote computers with System Monitor, sufficient permissions are required.