In addition to NTFS security settings, access to Windows features is further controlled by Group Policies in domain systems. The DeltaV Users OU has two GPOs that apply to it: DeltaV Basic Operator GPO and DeltaV Basic Configuration GPO. When a domain user is assigned a role in the DeltaV User Manager, that role determines which GPO applies to the user. For example, if the user is assigned the Basic Operator role, the group policies in the Basic Operator GPO will be applied to the user. If the user is assigned the Basic Configuration role, the group policies in the Basic Configuration GPO are applied to the user.
For the policy settings that are enabled for the DeltaV system, refer to the Emerson Knowledge Base for articles on hardened workstations and GPO settings. It is highly recommended that you not modify the DeltaV GPOs. When the DeltaV system is reinstalled, the GPOs are restored to the factory settings. However when the DeltaV Upgrade Wizard is used, DeltaV installation leaves the DeltaV GPOs intact and does not restore them to the factory settings. If you must modify the GPOs, use the DeltaV GPO as a template and create your own GPO from it; do not modify the DeltaV GPO directly. Use only Microsoft tools such as the Microsoft Group Policy Editor to modify GPO settings.