Dear,

i'am working since a long time with differents version of wincc advanced.

Now i'am with the last version : 16.1

Security management is changing in my company and we would like to use same policiy  in IPC with wincc advanced inside.

My goal :

To have only 3 group in wincc advanced.

group1  : administrator : (local account : administrator)

group2 : users (no local accounts)

group2 : special users (no local accounts)

i would like to add, delete change password of every accounts by my Active Directory.

Is it possible ??? on each documentation i found we need to create together on the AD and in the HMI project each users.....

I don't want to have to transfert in each panel new user if there is new one. I would like to have a centralized user management.

Thanks

Hello GB002,

when using Simatic Logon you can manage the users on the AD. It is recommended to have a user per group locally on the PC to be able to continue working when there is no connection to the AD server. It is required to have the same group names in the WinCC Advanced application and the AD.

Regards,

Frink