DeltaV system security

Hardened workstation security templates

The Center for Internet Security (CIS) defines workstation security benchmarks (found at http://benchmarks.cisecurity.org). The DeltaV installation applies many of the key benchmarks for Windows operating systems through the use of local policies (on workgroup systems) or group policies and group policy objects (GPOs) on domain systems.

The DeltaV installation automatically installs these settings on DeltaV workstations running Windows operating systems. Any CIS settings that interfere with DeltaV functionality, performance, or robustness are not applied.

For a spreadsheet of the settings and which settings can be modified, refer to the Emerson KBA on DeltaV Security Templates for this version of DeltaV.

View and verify the security template settings using either of the following Microsoft utilities:
  • RSOP.msc (run from the command prompt)
  • Group Policy Management Console (gpmc.msc run from the Start menu's run/search box or command prompt. Requires the MMC snap-in)
Refer to Microsoft's online help or TechNet articles for up-to-date information about using these utilities.

Modifying these settings is not recommended unless it is important to company policy (such as password settings, auditing settings, and so on) and only for those settings that are classified as user customizable.

Important

Changing any settings that are not classified as user customizable can result in DeltaV performance issues, or the DeltaV system not performing as expected.

Before changing any settings, back up the installed security settings (for domain-based systems, GPOs as *.POL files; for workgroups, *.inf files), archive the files/folders, and then make changes.