Configure Windows groups

Use Windows groups for Data Archive authentication.

1. Configure user accounts on client and server workstations.

   To use Windows users and groups, the Windows user accounts on the Data Archive server must exactly match the accounts on each client workstation. The account names and passwords must be identical.

2. Configure Windows groups and PI identities so that you have a 1:1 relationship between them.

   Follow these guidelines:

   • Map each Windows group to a PI identity.

   • Establish a naming convention for PI identities and/or Windows groups so that it is clear which group is mapped to which identity.

   • Manage group membership using Windows. Note that you cannot nest local Windows groups, as you can AD groups.

3. Review your Windows groups to ensure that all Windows users can get the appropriate Data Archive permissions.

   (See Learn how to manage user access permissions with Windows groups).