We have web applications running on IIS 7.5, and their application pool's identity is ApplicationPoolIdentity.
We want to enable them to read performance counters.
Unfortunately, we cannot add their accounts into the Performance Monitor Users user group. Because their account is created dynamically and is changing.
How can we enable these applications to read performance counters, without granting unnecessary privileges ?