High Security Systems, Technical Manual
3 User's Guide for System Configuration
TAC AB, Nov 2006
15 (20)
04-00007-01-en
3.1
Setting up Windows Accounts in TAC Vista.
Note that the "PlantTAC\VistaAdmin" account running the TAC Vista
servers does not have to be an administrator of the domain (that is
belonging to the group "Domain Admins"). The TAC Vista administra-
tive domain account needs only to be an administrator on the computers
where TAC Vista server is running (that is belonging to the local group
"Administrators" and to the group "Domain Users").
1
Start the TAC Vista Workstation. The "VistaAdmin" user is auto-
matically logged in. The group "PlantTAC\VistaAdministrators"
has automatically been created in the ACL editor, and the users in
this group can be expanded. Note also that the users of this group
have been added to the Vista group "$ADMINISTRATORS"
together with the Vista user "SYSTEM". It is recommended to
keep the "SYSTEM" user in this group although this account can
be utilized in the "High security" mode. This makes it possible to
analyse the database in a location that does not have any connec-
tion with the "PlantTAC" domain.
2
Add the account objects "PLANTTAC.VISTAOPERATION-
MANAGERS" with the authority level "Operation manager",
"PLANTTAC.VISTAFIELDMANAGERS" with the authority
level "Field manager" and finally "PLANTTAC.VISTAUSERS"
with the authority level "User" to the TAC Vista database. Note in
the ACL editor that these NT accounts can be expanded into their
users.
