SecurityExcepti on with PerformanceCoun ter on remote server in .NET 2.0

[Geoff McElhanon]

I have been struggling with a security issue that occurs under .NET
2.0, but does not occur under .NET 1.1. Essentially I am trying to
open up a performance counter on a remote server and monitor its value.
In .NET 1.1 this worked fine, however under .NET 2.0 it fails when I
am not an administrator on the remote server.

To provide a lean demonstration of the issue, I created the following
class:

=============== =============

using System;
using System.Diagnost ics;
using System.Threadin g;

namespace ConsoleApplicat ion3
{
class Class1
{
/// <summary>
/// The main entry point for the application.
/// </summary>
[STAThread]
static void Main(string[] args)
{
try
{
string machineName = null;

// Was exactly 1 argument was passed?
if (args.Length != 1)
{
// Prompt for machine name
Console.Write(" Please enter a machine name: ");
machineName = Console.ReadLin e();
}
else
{
// Use command line argument
machineName = args[0];
}

// Get the performance counter
PerformanceCoun ter c = new PerformanceCoun ter("Processor" , "%
Processor Time", "_Total", machineName);

// Display counter value once every second for 5 seconds
for (int i = 0; i < 5; i++)
{
Console.WriteLi ne(c.RawValue);
Thread.Sleep(10 00);
}
}
catch (Exception ex)
{
Console.WriteLi ne("=========== ===");
Console.WriteLi ne(ex);
Console.WriteLi ne("=========== ===");
}
finally
{
Console.WriteLi ne();
Console.WriteLi ne("Hit ENTER to quit application.");
Console.ReadLin e();
}
}
}
}

=============== =============

I then created a batch file that compiles this file under both .NET 1.1
and .NET 2.0:

c:\windows\Micr osoft.NET\Frame work\v1.1.4322\ csc.exe
/out:CounterTest 11.exe /t:exe Class1.cs
c:\windows\Micr osoft.NET\Frame work\v2.0.50727 \csc.exe
/out:CounterTest 20.exe /t:exe Class1.cs
Now, when I run either version against a server on which I am an
administrator, I get the following output:
--------
C:\Projects\Con soleApplication 3>CounterTest20 .exe
Please enter a machine name: speck
6708935078125
6708945000000
6708954921875
6708964609375
6708974687500

Hit ENTER to quit application.
--------

When I run the .NET 1.1 version against a server on which I am only a
member of the "Performanc e Monitoring" group, I get the following
results:
--------
C:\Projects\Con soleApplication 3>CounterTest11 .exe
Please enter a machine name: bonnie
114549931445312
114549938945312
114549946445312
114549954023437
114549961523437

Hit ENTER to quit application.
--------

But when I run the .NET 2.0 version against the same server, I get the
following:
--------
C:\Projects\Con soleApplication 3>CounterTest20 .exe
Please enter a machine name: bonnie
==============
System.Security .SecurityExcept ion: Requested registry access is not
allowed.
at System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource
resource)
at Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean
writable)
at Microsoft.Win32 .RegistryKey.Op enSubKey(String name)
at
System.Diagnost ics.Performance CounterLib.Find CustomCategory( String
categor
y, PerformanceCoun terCategoryType & categoryType)
at System.Diagnost ics.Performance CounterLib.GetC ategoryType(Str ing
machine, S
tring category)
at System.Diagnost ics.Performance Counter.Initial ize()
at System.Diagnost ics.Performance Counter..ctor(S tring categoryName,
String co
unterName, String instanceName, String machineName)
at ConsoleApplicat ion3.Class1.Mai n(String[] args)
The Zone of the assembly that failed was:
MyComputer
==============

Hit ENTER to quit application.

Now, I posted this earlier to another forum but the only suggestion was
that I was not running with Full Trust. I am launching the application
locally, and so I don't understand how I could not be running under
Full Trust. I poked around in the .NET 2.0 configuration tool, but
could not come up with any ideas.

Any insight into this problem would be very much appreciated!
Geoff McElhanon

[Willy Denoyette [MVP]]

V2 uses WMI to collect performance information from the remote perfmon
(through the remote registry), that means that the impersonated user
(remote) must be a member of the (remote)adminis trators alias, only
administrators are allowed to read perf data.

Willy.

"Geoff McElhanon" <gm********@yah oo.comwrote in message
news:11******** *************@b 28g2000cwb.goog legroups.com...
|I have been struggling with a security issue that occurs under .NET
| 2.0, but does not occur under .NET 1.1. Essentially I am trying to
| open up a performance counter on a remote server and monitor its value.
| In .NET 1.1 this worked fine, however under .NET 2.0 it fails when I
| am not an administrator on the remote server.
|
| To provide a lean demonstration of the issue, I created the following
| class:
|
| =============== =============
|
| using System;
| using System.Diagnost ics;
| using System.Threadin g;
|
| namespace ConsoleApplicat ion3
| {
| class Class1
| {
| /// <summary>
| /// The main entry point for the application.
| /// </summary>
| [STAThread]
| static void Main(string[] args)
| {
| try
| {
| string machineName = null;
|
| // Was exactly 1 argument was passed?
| if (args.Length != 1)
| {
| // Prompt for machine name
| Console.Write(" Please enter a machine name: ");
| machineName = Console.ReadLin e();
| }
| else
| {
| // Use command line argument
| machineName = args[0];
| }
|
| // Get the performance counter
| PerformanceCoun ter c = new PerformanceCoun ter("Processor" , "%
| Processor Time", "_Total", machineName);
|
| // Display counter value once every second for 5 seconds
| for (int i = 0; i < 5; i++)
| {
| Console.WriteLi ne(c.RawValue);
| Thread.Sleep(10 00);
| }
| }
| catch (Exception ex)
| {
| Console.WriteLi ne("=========== ===");
| Console.WriteLi ne(ex);
| Console.WriteLi ne("=========== ===");
| }
| finally
| {
| Console.WriteLi ne();
| Console.WriteLi ne("Hit ENTER to quit application.");
| Console.ReadLin e();
| }
| }
| }
| }
|
| =============== =============
|
| I then created a batch file that compiles this file under both .NET 1.1
| and .NET 2.0:
|
| c:\windows\Micr osoft.NET\Frame work\v1.1.4322\ csc.exe
| /out:CounterTest 11.exe /t:exe Class1.cs
| c:\windows\Micr osoft.NET\Frame work\v2.0.50727 \csc.exe
| /out:CounterTest 20.exe /t:exe Class1.cs
|
|
| Now, when I run either version against a server on which I am an
| administrator, I get the following output:
| --------
| C:\Projects\Con soleApplication 3>CounterTest20 .exe
| Please enter a machine name: speck
| 6708935078125
| 6708945000000
| 6708954921875
| 6708964609375
| 6708974687500
|
| Hit ENTER to quit application.
| --------
|
| When I run the .NET 1.1 version against a server on which I am only a
| member of the "Performanc e Monitoring" group, I get the following
| results:
| --------
| C:\Projects\Con soleApplication 3>CounterTest11 .exe
| Please enter a machine name: bonnie
| 114549931445312
| 114549938945312
| 114549946445312
| 114549954023437
| 114549961523437
|
| Hit ENTER to quit application.
| --------
|
| But when I run the .NET 2.0 version against the same server, I get the
| following:
| --------
| C:\Projects\Con soleApplication 3>CounterTest20 .exe
| Please enter a machine name: bonnie
| ==============
| System.Security .SecurityExcept ion: Requested registry access is not
| allowed.
| at System.ThrowHel per.ThrowSecuri tyException(Exc eptionResource
| resource)
| at Microsoft.Win32 .RegistryKey.Op enSubKey(String name, Boolean
| writable)
| at Microsoft.Win32 .RegistryKey.Op enSubKey(String name)
| at
| System.Diagnost ics.Performance CounterLib.Find CustomCategory( String
| categor
| y, PerformanceCoun terCategoryType & categoryType)
| at System.Diagnost ics.Performance CounterLib.GetC ategoryType(Str ing
| machine, S
| tring category)
| at System.Diagnost ics.Performance Counter.Initial ize()
| at System.Diagnost ics.Performance Counter..ctor(S tring categoryName,
| String co
| unterName, String instanceName, String machineName)
| at ConsoleApplicat ion3.Class1.Mai n(String[] args)
| The Zone of the assembly that failed was:
| MyComputer
| ==============
|
| Hit ENTER to quit application.
|
| Now, I posted this earlier to another forum but the only suggestion was
| that I was not running with Full Trust. I am launching the application
| locally, and so I don't understand how I could not be running under
| Full Trust. I poked around in the .NET 2.0 configuration tool, but
| could not come up with any ideas.
|
| Any insight into this problem would be very much appreciated!
|
|
| Geoff McElhanon
|

[Geoff McElhanon]

Thank you, oh bearer of bad news. :-(

But seriously... thank you.

Willy Denoyette [MVP] wrote:

V2 uses WMI to collect performance information from the remote perfmon
(through the remote registry), that means that the impersonated user
(remote) must be a member of the (remote)adminis trators alias, only
administrators are allowed to read perf data.

Willy.

[Willy Denoyette [MVP]]

I would never use the PerformanceCoun ter class to access remote systems when
not running in a domain realm, much better is to use System.Manageme nt
clases (WMI wrappers) to access management objects like performance
counters. Note that even in this case you need to enable remote access to
the WMI service namespace.
Willy.
"Geoff McElhanon" <gm********@yah oo.comwrote in message
news:11******** *************@7 5g2000cwc.googl egroups.com...
| Thank you, oh bearer of bad news. :-(
|
| But seriously... thank you.
|
| Willy Denoyette [MVP] wrote:
| V2 uses WMI to collect performance information from the remote perfmon
| (through the remote registry), that means that the impersonated user
| (remote) must be a member of the (remote)adminis trators alias, only
| administrators are allowed to read perf data.
| >
| Willy.
| >
|