...
Configuration of user's parameters is being performed in the following dialog box.
The configuration dialog box consists of three basic parts (tabs):
...
If the option is checked, the defined user is an administrator. Administrator The administrator has the access rights to all objects of the D2000 system and can carry out all the parameters in the part Enabled actions are enabled (he/she can carry out all the actions). Normally, only administrator administrators can log in to configuration processes of D2000: Application Manager, CNF, GrEditor, System Console, Tell. This setting can be changed by the application parameter parameter AllowNonAdminConfLogin.
| Kotva | ||||
|---|---|---|---|---|
|
...
If the option is checked, the user's logon login to all D2000 processes is not allowed.
...
If the checkbox is checked, the user's definition will be limited by the date entered in the spin box placed right from this checkbox. After the expiration of the date, the system will deny to logon log on the user.
Time out
Timeout logoff is given in minutes. If the user is not carrying out any actions in process the D2000 HI process within this time, he/she will be automatically logged off.
...
If the checkbox is checked, the user does not need not any password for access to individual processes of the D2000 system - only to enter the user's name (not full name). Logon is required only to for client processes with the user interface - D2000 HI, D2000 GrEditor and D2000 DDE Server.
...
If the option is checked, the password validity is limited by the number of days entered in the spin button placed right. After the expiration of this password validity, the user is called to change the password for 5 times. If he does not change it, the next logon will be denied. In the spin button Limited to, there is displayed information about the last day of the defined password validity.
Note
Each user can change his/her their password via the dialog box in process the D2000 HI process. After any password change, the password validity will be adjusted automatically to the date increased by the number in the parameter Max. expiration time.
...
If the option is checked, the given user will be forced to change his/her password at the next logon into process the D2000 HI process. After changing the password, the D2000 Server will automatically uncheck the option Change password at login (the change of password will not be necessary at the next logon). If the given user is currently logged on into process the D2000 HI process, he/she will be automatically logged off from the process. This feature works also in the D2000 Thin Client.
Menu
The option Menu is used to select the object of HI MENU type, which will be inserted into the menu of the process D2000 HI after the user's logon.
User delimits external reference
...
If the option is checked, the system will generate a warning when the user tries to rename or delete the object on which the user has rights. 
This option is useful when the value of some object is read/set through the process D2000 GateWay Server or D2000 OPC Server. Both processes refer to an object by name (without reference integrity), hence to rename or delete deleting the object can be dangerous. If these "delimits external references" are accessible to the user, the system will generate a warning when the user tries to rename or delete the object. This attribute does not influence the other parameters of object.
| Kotva | ||||
|---|---|---|---|---|
|
...
configuring objects of User type
This option is useful only for user users with administrator rights (option Administrator in the configuration dialog window). The administrator allows to configure the objects of User type, he can create, edit, rename and delete the other users. If the logged-on user is not an administrator he they can only read these objects.
...
The checkbox Composition allows to choose choosing a graphic information window (picture, graph) or composition of windows. The selected object will be opened on the HI process desktop always after the correct user's logon.
Macros
...
Definition of up to eight objects, that the user can open (start) from process the D2000 HI process using command buttons in the toolbar or keyboard shortcuts (CTRL+1 up to CTRL+8).
These objects may be the following types:
...
Enabled actions
Enabling or disabling of some special operations for the user in the HI process environment. Enabling (or disabling) will show (hide) the particular item in the menu of the process D2000 HI after the user's logon.
- Print - print graphs, and pictures.
- Edit archive - edit the archive - modify, delete, and insert values into the archive database.
- View archive - the subset of Edit archive: browse historical values using HI process facilities.
- HI Parameters - configuration of the HI process parameters.
- Stop HI - stop the process D2000 HI.
- Conf. of G, C, R - configuration of:
- Graphs
- Compositions
- Reports
- Open G, C, R - open individual objects by means of the menu Open in Hi process environment.
- Edit dictionary - enables editing the Dictionary
- Structures - select structures from the list and then browse/modify it
- Alarms - open the list of Alarms.
- Logging - browse the log database.
- External tools - configuration of external tools.
- View TC - browse Time channels.
- Browser - open Browser.
- Macros - configuration of User macros.
- Open Pictures - open individual picture objects by means of the menu Open in Hi process environment.
...
Selection of permitted authentication methods. As a default, only the D2000 method is permitted (verification of name and password which have been configured in this dialog box). Other methods (NTLM, Kerberos, TCL, RFID) are disabled. To use other authentication methods than the default one you must enable the method to selectedselect/all users through the configuration parameters of the D2000 Server process.
The checkbox TCL also enables/disables to log on the user through a web browser in the thin client environment.
| Kotva | ||||
|---|---|---|---|---|
|
This parameter is mandatory for NTLM, Kerberos and TCL authentication. In all cases after the successful verification of the user's identity by the Windows authentication subsystem (NTLM/Kerberos) it is also verified that the user is logged into the domain with the same name as the value of parameter Domain (comparison is case-sensitive). If the domain name is different, the logon will fail and the log of process D2000 Server will contain the error message similar to this one:
Authentication: error in the domain - expecting Ipesoft, found IPESOFT
...
User's access to individual object groups is defined in the tab Object groups.
Add
Clicking the button will display the selection windows containing the list of all object groups. Functional buttons in the selection windows will add the selected group (or selection) into the list of user's object groups. The groups already added are grey.
...