Unable to grant full access to the Network Directory
If you are using
FactoryTalk Services Platform
version 2.50 or earlier, by default, the FactoryTalk
Network Directory does not allow access to user accounts that are not members of the Windows
Administrators group on any local computer connected to the FactoryTalk
Network Directory.Expand access to the Network Directory by allowing any user who has successfully logged on to
Windows
to have full access to the Network Directory. To do this, first add the Windows
Authenticated Users group to the FactoryTalk
Network Directory, and then add the Authenticated Users group to the FactoryTalk
Administrators group in the Network Directory.
IMPORTANT:
For
FactoryTalk Services Platform
version 2.51 or later, by default, the Windows
Authenticated Users group is added to the Network Directory user groups after installation. All user accounts on any local computer connected to the Network Directory are allowed access to the Network Directory.To add the Authenticated Users group to the Network Directory
- StartFactoryTalk Administration Console.Go toRockwell Software > FactoryTalk Administration Console.
- At the prompt to select aFactoryTalk Directory, selectNetwork.
- If prompted, log on using an administrator user name and password.
- InExplorer, expandSystem > Users and Groups. Right-clickUser Groups, and then chooseNew >.Windows-Linked User Group
- In theNewdialog box, selectWindows-Linked User GroupAdd.
- In theSelect Groupsdialog box, selectAdvanced.
- In the advancedSelect Groupsdialog, selectFind Now.
- In the list ofWindowsaccounts, selectAuthenticated Users, and then selectOK.
- In theSelect Groupsdialog box, selectOK.
- In theNewdialog box, selectWindows-Linked User GroupCreate.
- Add the Authenticated Users group to theFactoryTalkAdministrators group.
To add the Authenticated Users group to the
FactoryTalk
Administrators groupAfter the Authenticated Users group is added to the Network Directory, add the Authenticated Users group to the Administrators group:
- InExplorer, expandSystem > Users and Groups. Right-clickAdministrators, and then selectProperties.
- In theAdministrators Propertiesdialog box, selectAdd.
- In theSelect User or Groupdialog box, selectAuthenticated Usersand then selectOK.IfAuthenticated Usersis not visible, make sure that the option,Show groups onlyis selected at the bottom of theSelect User or Groupdialog box.
- In theAdministrators Propertiesdialog box, selectOK.
When finished, the Network Directory will allow any user logged on to
Windows
to have administrative access to the FactoryTalk
Network Directory.If needed, modify policy settings to allow expanded access to the system.
Provide Feedback