Rockwell Automation FactoryTalk View Site Edition Users Guide - Manual (Page 106)

F ACTORY T ALK V IEW S ITE E DITION U SER ’ S G UIDE
5–24
• •
•
•
•
Using Windows-linked accounts
When a Windows-linked user attempts to access system resources, FactoryTalk Directory
relies on Windows to determine whether the user’s name and password are valid, and
whether the account is active or locked out.
Use this type of user or group account when the security needs of the Windows network
match those of the control system. For example, you might consider Windows-linked
accounts when:
 The control system is located in its own domain, perhaps separate from business
systems, and user accounts and passwords can be shared between Windows and
FactoryTalk software programs.
 Operators can log on and off computers with their own Windows accounts, and the
software programs they use start automatically.
For more information, see FactoryTalk Security Help.
Using both types of user account
If you decide to use both types of FactoryTalk Security user account in an application,
remember that Windows-linked accounts only refer to accounts that already exist at the
Windows domain.
This means that you cannot convert an original FactoryTalk account to a Windows-linked
account, nor can you add a FactoryTalk account to a Windows-linked user group.
Creating group accounts
Whichever type of FactoryTalk Security account you decide to use, when setting up
security for a FactoryTalk View SE application, it is recommended that you create group
accounts and set up access permissions for them first.
Using group accounts makes it easier to assign and manage permissions for multiple users
with the same security needs. Rather than assigning permissions to each user separately,
you can create accounts for new users, and then add these users to the appropriate groups.
Later, if you want to change an individual user’s permissions, you can move the user’s
account to a different group. You can also change permissions for several individual users
at once, by modifying the group that the users belong to.
You can add Windows-linked groups to FactoryTalk groups. The Windows Administrators group
is added automatically to the FactoryTalk Administrators group during FactoryTalk Directory
installation. For more information, see the FactoryTalk Security Help.