Workgroup And Domain - Siemens SIMATIC PCS 7 Configuration Manual

Preparation and administration
4.2 Preparatory planning
4.2.5

Workgroup and domain

Working environment
You have the option of operating the computers in your PCS 7 plant in a workgroup or domain
environment.
The following tables present a comparison of the advantages and disadvantages (from a
technical perspective) as well as scenarios (examples) and their use in workgroups and
domains.
Note
This information is provided as a basis for discussion to assist you in the selection of the
appropriate environment for your computers. In addition to the technical criteria, also consider
organizational criteria (for example, plant-specific IT, Microsoft expertise, resources, workload
and maintenance, etc.).
Advantages and disadvantages
General information (in
relation to Microsoft Win‐
dows)
Administrator
User accounts, group pol‐
icies, resources, security
Planning
Number of PC stations
Use with SIMATIC Logon ● The users set up for the AD are used.
20
Domain (AD; Active Directory)
The user information is stored centrally.
Central safety database
Suitable for very large networks (scalability)
Permissions for devices and files are managed
in the AD.
The administrator must have comprehensive
knowledge (substantially higher qualifications).
Central administration in the AD.
Comprehensive planning is required.
Additional PC stations required to manage the
AD. Windows server required to store central
security information.
● High reliability through the use of redundant
domain controllers.
Workgroup (WG)
Standard user settings are required at each PC
station.
Local safety database
Suitable for short distances in the plant and a
limited number of PC stations.
Permissions for devices and files are managed
by individual PC stations.
The administrator must be familiar with the set‐
up and management of PC stations in the work‐
group network.
Distributed administration on each PC station.
Less comprehensive planning is required.
Windows server only required if this is used to
set up the infrastructure, for example, as a
DHCP server
● The users can be managed at a central PC
station.
● No redundancy is available for the central
logon station to be set up.
Compendium Part A - Configuration Guidelines (V8.2)
Configuration Manual, 08/2016, A5E38166869-AA