Scenario 5: Two domains, one-way trust configuration (DeltaV Server trusts domain)

Follow this procedure to configure the user accounts when in a domain-to-domain configuration with one-way trust communication in a DeltaV Remote Workstation system (following the steps will configure these items).

  • In order for a domain user to connect to the DeltaV database server from the remote workstation in a one-way trust domain environment, the following must apply :
    • The Windows user on the remote workstation must have a DeltaV account on the remote system.
    • The Windows user on the remote workstation must have a DeltaV account on the server.
    • The DeltaV user on the remote workstation must have a DeltaV account on the server.
  • For domain logons, the user does not need to have a Windows account on the remote workstation.
  • In order for a non-domain user to connect to the DeltaV database server from the remote workstation in a one-way trust domain environment, the following must apply:
    • The Windows user on the remote workstation must have a Windows account on both the remote workstation and the DeltaV server with the same username and password.
    • The Windows user on the remote workstation must have a DeltaV account on both the remote workstation and the DeltaV server.
    • The DeltaV user on the remote workstation must have a DeltaV account and a Windows account on the server with the same username and password as on the remote system.
    • The DeltaV user on the remote workstation must have a Windows account on the remote system.

Set up a remote system in a two-domain, one-way trust configuration (DV Server trusts domain)

Since the remote workstation is on a domain, users can include local users and domain users. An individual can have both a local account and a domain account on the workstation. (Having both accounts is typical for an engineer who uses the workstation as a personal PC.) Most users should only have a domain account. This simplifies the administration of user accounts

  1. Create the domain Windows user account on the remote workstation using Windows User Manager:
    • Domain users are not added directly as new users. They are given access to the machine and resources by being added to a local group on the workstation. Refer to the Domain section in your Windows documentation for details on adding domain members to a workstation group.
    • Add the domain user to the appropriate DeltaV group (DeltaV, DeltaV Access, DeltaV Admins).
  2. Create the user accounts on the DeltaV server using DeltaV User Manager:
    • Create a DeltaV account for the domain user. Do not enter a password for the DeltaV account. (This assumes that the user already has a domain account. If you still need to create the domain user account, refer to the Domain section of your Windows documentation for more information.)