Understand whether to use OS Group or OS User security mode

Refer to the following descriptions to help you determine which Security Mode—OS Group or OS User—to use for MES Web Portal user authentication in your system environment:

• In OS Group mode, the AD groups to which a user belongs are checked and the user’s AD user account is checked to verify their authentication to log in to an MES Web Portal session. If the user belongs to an AD group that has also been configured as an OS group in the MES database, then the user is allowed to open a session. If an MES user account does not already exist for that user, then one is automatically created. For information about adding AD user groups as OS groups in the MES database, see Set up user groups and users in OS Group security mode.

• In OS User mode, the user’s AD user account is checked to verify their authentication to log in to an MES Web Portal session. If the user’s AD user account has also been configured as an OS user in the MES database, then the user is allowed to open a session. For information about adding AD user accounts as OS users in the MES database, see Set up user groups and users in OS user security mode.

  Note: If you change the security mode, you have to restart the MES Web Portal service in Internet Information Services (IIS).