Using a Windows 2003 Domain Controller with a Windows 2008 Historian Server

About this task

When you use domain security with a Windows 2008 Historian Server and the domain controller is a Windows 2003 controller, you must configure the Historian Data Archiver service to log on as a valid domain account and you must add the user right Act as a Part of the Operating System to its list of rights.

Procedure

  1. Set up the log-on of the Historian data archiver service:
    1. In Control Panel > Administrative Tools, double-click Services.
      The Services dialog box appears.
    2. Double-click Historian Data Archiver.
      The Service dialog appears.
    3. In the Log On As pane, click This Account and select a domain user account.
    4. Click OK.
  2. Add the Act As Part of Operating System right to the domain account:
    1. In Administrative Tools, double-click Domain Security Policy.
      The Default Domain Security Settings dialog box appears.
    2. In the Security Settings tree, select User Rights Assessment from Local Policies.
    3. Double-click Act as a part of the operating system policy.
    4. Select Define these policy settings check box, and click Add User or Group.
      The Add Users and Groups dialog box appears.
    5. Select your domain user name.
    6. Click Add and click OK
    7. In Services, restart Historian Data Archiver.
      You should now be able to log on to Historian Administrator using Domain Security.

      If you attempt to log on to the Historian Data Archiver as a Local System Account, you may be denied access because the System Account in Windows 2008 is not privileged to access the Windows 2003 Domain Administrator. A valid domain user account, however, is privileged to access the Windows 2003 Domain Administrator if it has also been granted the Act as a Part of the Operating System right.