Learn how to disable PI password authentication (explicit logins)

When a user logs onto the Data Archive server by typing in a PI user name and password, this is called an explicit login (or password authentication). Explicit logins on the Data Archive server are the least secure authentication method available to you. A good security practice is to disable all explicit logins on the Data Archive server. However, this is not always possible. You can alternatively disable explicit logins for some accounts.

Here are your basic options:

• Disable All Explicit Logins. This is the most secure option, but if your current configuration requires users to log into PI user accounts, then you are not ready for this move.

• Disable Explicit Logins with Blank Passwords. If it is not possible for you to disable explicit logins, then you should disable explicit logins for all PI users with a blank password. Before doing so, give your users an opportunity to create passwords for their PI user accounts.

• Disable Explicit Logins for Individual User Accounts. As you begin to configure Windows authentication for your users, you can disable explicit logins for these accounts.