Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a couple AWS windows 2008 instances that are about to go into production but I need them to be load tested first. We found an overseas group to do the load testing but they want to be able to monitor the CPU usage while they run their tests. My first thought was to create an extremely limited user account that could RDP into the server and run Performance Monitor. However I can't figure out how to limit a user in that way. I'm not a server guy, I'm mostly a developer. I've scoured Google and read through the only Windows Server book we have in the office but can't find they answer. Any help and/or suggestions would be greatly appreciated.

share|improve this question
up vote 1 down vote accepted

You should be able to grant the user(s) the "Profile system performance" user right in the Local Security Policy of the server, accessed via the Security Configuration Management applet in Administrative Tools.

share|improve this answer
That works for granting that right, but how would I go about limiting everything else? – Nathan Sep 8 '11 at 16:20
"everything else" is a pretty broad canvas. Exactly what do you want to restrict? Have you tried logging on as a standard user and see what actions are available to the standard user? – joeqwerty Sep 8 '11 at 16:25
That's a valid point, I logged in and it seems restricted enough. I just don't understand why user rights and groups are so abstracted. – Nathan Sep 8 '11 at 16:59

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.