Required Windows permissions

The following sections describe the Windows permissions and security privileges required by PI ICU.

Registry permissions

PI ICU stores some settings in the local registry. The PI ICU user account must have read/write permissions to update these registry keys and any below them:

For 32-bit operating systems:

HKEY_LOCAL_MACHINE\SOFTWARE\PISystem\PI-SDK
HKEY_LOCAL_MACHINE\SOFTWARE\PISystem\InterfaceConfigurationUtility
HKEY_LOCAL_MACHINE\SOFTWARE\PISystem\Interfaces
HKEY_LOCAL_MACHINE\SOFTWARE\PISystem\ICU

For 64-bit operating systems:

HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PISystem\PI-SDK
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PISystem\InterfaceConfigurationUtility
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PISystem\Interfaces
HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\PISystem\ICU

Service Control Manager permissions

PI ICU makes calls to the Service Control Manager in order to query service status of interfaces, bufserv, and pinetmgr, and creates, edits, and removes services. In Windows, only Administrators and Power Users can start, stop, or pause a service by default.

For more information about methods for granting users the rights to manage services, see the following Microsoft Support article (https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/grant-users-rights-manage-services).

Folder permissions

PI ICU reads and writes to files in the PIPC directory tree. The following permissions are required for it to function correctly:

• Read Permissions to PIPC directory

• Read/Write Permissions to PIPC\dat directory

• Read/Write Permissions to PIPC\Interfaces directory and any subdirectories under this directory.