How to: Set Profiling Permissions

A basic security principle states that applications should run with no more than the permissions they need. This applies to users also. If users can be fully effective when logged on as members of the Users group instead of the Administrators group, they should not be granted Administrator permissions. The first procedure, "To create a user account that has User permissions," describes how to create a user account for a member of the Users group.

Members of the users group will need access to the folders and files on disk that are shared with other members of the team. The second procedure, "To grant access to shared project files," describes how to grant that access.

Members of the users group can run the profiling tools of Visual Studio Team Edition for Developers if an administrator grants them access to the software driver for the profiling tools. The last procedure, "To grant access to the profiling driver," describes how to grant access to that driver.

Note

You need administrator permissions to follow the steps in these procedures.

To create a user account that has User permissions

  1. Right-click My Computer and then click Manage.

    The Computer Management window opens.

  2. Expand Local Users and Groups.

  3. Right-click the Users folder and then click New User.

    The New User dialog box appears.

  4. Fill out the fields in this dialog box with the information for the user account you are creating. Specify a password. Optionally, select the check box that requires that the user change the password at the next logon.

  5. Click Create and then click Close.

    The new user appears in the Users group, a group of users who do not have Administrator permissions.

To grant access to shared project files

  1. In Windows Explorer, locate the root of the folder tree for project files used by this user and shared by the project team.

    The path of this folder might resemble the following:

    D:\ourProject
    
  2. Right-click the folder and then click Properties.

    The <folder name> Properties dialog box is displayed.

  3. Click the Security tab.

  4. Click the name of the user's account in the Group or user names box.

  5. In the Permissions for <user name> box, select the check box for Full Control.

  6. Click OK.

    This grants permissions to the user for the shared folder tree that starts with the folder selected in step 5.

To grant access to the profiling driver

  1. Open a command prompt.

  2. Change the directory to:

    <drive>:\Program Files\Microsoft Visual Studio 8\Team Tools\Performance Tools
    
  3. Run the following command:

    vsperfcmd /driver:start
    

    This command installs and starts the driver for the Visual Studio Team Edition for Developers Profiling tools. Note that the effects of this step are undone after the computer restarts, unless you also perform the final step in this procedure.

  4. Run the following command:

    vsperfcmd /driver:adduser,<user name>
    

    This grants the <user name> account access to driver for the Profiling tools. This step is required because the user is not an administrator on this computer. Note that the effects of this step are undone if the driver is uninstalled.

  5. (Optional) To preserve the results of the two previous steps after computer restarts, perform the following step at the command line:

    vsperfcmd /driver:autostart
    

    This user, after logging on, will now be able to use the Team System profiling tools without Administrator permissions.

See Also

Tasks

How to: Profile Applications Remotely