Audit fail event in the client server when starting perfmon remote

Tech-Archive recommends: Fix windows errors by optimizing your registry

Dear All,

I have a centralized monitoring server to monitor a few client servers.
And there is a domain account is used for this purpose.

That means I have added the domain account to:
1) In the Performance Log Users local group of client servers
2) In the Administrators local group of the centralized monitoring server

After start the perfmon, I found that there are some failed audit events in
the client server:

Source: Security
Category: Object Access
Type: Failure Aduit
Event ID: 560

Object Open:
Object Server: SC Manager
Object Type: SC_MANAGER OBJECT
Object Name: ServicesActive
Handle ID: -
Operation ID: {0,349256720}
Process ID: 536
Image File Name: C:\WINDOWS\system32\services.exe
Primary User Name: CLIENT01$
Primary Domain: Domain
Primary Logon ID: (0x0,0x3E7)
Client User Name: PerfmonDomainAccount
Client Domain: Domain
Client Logon ID: (0x0,0x14D136AC)
Accesses: READ_CONTROL
Connect to service controller
Enumerate services
Query service database lock state

Privileges: -
Restricted Sid Count: 0
Access Mask: 0x20015

Please help.

Regards,
Tommy Chan

.