Remote access > Connecting to a domain-based DeltaV computer from any workgroup-based computer

Where to create user accounts for DCOM workgroup to domain access

The following table illustrates the user accounts and where they are created when connecting a workgroup-based OPC or other DCOM client to a domain-based DeltaV computer (for example a DeltaV Remote Access Server (RAS), an OPC Server, a DeltaV Batch Historian, or DeltaV Batch Executive).

Where the user is Local User Account?

(not the DeltaVAdmin user account)

Local DeltaVAdmin User Account? Notes
Client side YES YES

Whenever there is a local account on both sides, the passwords must match on both sides.

Important

For the DeltaVAdmin user account, all local DeltaVAdmin passwords must match the DeltaV DOMAIN account (that is, Domain\DeltaVAdmin).

DeltaV side

(That is, the DeltaV computer to which you are connecting.)

YES

The local user must exist on the DeltaV ProfessionalPlus workstation.

Note

The local account on the client must match the domain account that is also a DeltaV user (a DeltaV database account) so that the local user will be granted the same DeltaV privileges as the domain user.

NO

Whenever there is a local account on both sides, the passwords must match on both sides.

Important

For the DeltaVAdmin user account, all local DeltaVAdmin passwords must match the DeltaV DOMAIN account (that is, Domain\DeltaVAdmin).

Important
The following rules must be adhered to when creating a local DeltaVAdmin account on ANY computer (DeltaV or non-DeltaV):

  • Always configure the local DeltaVAdmin account to not allow local or remote login.

    Use gpedit.msc under Local Computer Policy → Computer Configuration → Windows Settings → Security Settings → Local Policies → User Rights Assignment.

    Add the local DeltaVAdmin account to the Deny log on locally and Deny log on through Remote Desktop Services policies.

  • The DeltaVAdmin accounts must remain synchronized (that is, passwords must match) at all times.
  • When a DeltaV-side, local DeltaVAdmin account is required, only make it a member of the local DeltaV user group. Do not make it a member of any Administrator-level groups.