I have some issues with allowing anonymous access to SIMATIC NET OPCUA server.

The first guide on the topic Data Exchange between S7 Station and PC Station with SIMATIC NET OPC Server
desribes pretty much what i'm trying to do.

I have a Windows server with SIMATIC NET v20 running a OPC-UA server that are connected to Siemens 1517H plc's over S7 protocol.

I am aware the plc's have built in OPC, but the client requires a stand alone solution.

The anonymous login is enabled on the server.(picture1)

When i connect to the server with UAExpert, i can connect as anonym.(picture2)

I can even get overview of the data structure.(picture3)

The issue comes when im dragging the tags over to the data access view. Nothing is happening except error in the log.(picture4)

If i change to log in with username and password, everything works as it should. i am logging in with the Windows username and password.(picture5)

I have tried looking into windows access restrictions, but i cant find anything in the documents.

Is there anything i have to change in the config files of the server?

K

Hello,

the handling is correct.
There was a change in the OPC access handling with SIMATIC NET PC Software V20 regarding security by default.
An anonymous user no longer has full access rights.

Please note the information in the manual "SIMATIC NET: PC software Industrial Communication with PG/PC Volume 2 - Interfaces"
https://support.industry.siemens.com/cs/ww/en/view/109977706 > chapter 4.3.6:

***
Access restrictions in the S7 OPC UA servers as of V20
As of "SIMATIC NET PC Software V20", access to the objects of the S7-specific namespaces for the
S7 OPC UA server is adapted to the roles assigned to the user. This means, among other things,
that a user who logs onto an end point of the S7 OPC UA server anonymously only has very
limited rights in the symbol namespace of the OPC UA server. Reading or writing the variables
is therefore not possible with this role. Anonymously logged-on users can only browse variables.
***

You have to use a valid local Windows user account and password for connection to the UA server if you want read your PLC variables.