Windows side of the mapping

You can map a PI identity to an Active Directory user or group or to a local user or group.

Your PI mappings can use the following Windows resources:

• Any Active Directory (AD) Principal (user or group)

• Any local Windows user or group

If you use local Windows security, then the Windows user accounts on Data Archive must exactly match the Windows user accounts on each client workstation. The account names, and also the passwords must be identical on the server and all client machines. When a password changes for a Windows user account, you must make that change on Data Archive and all participating client machines.

Local Windows authentication is not as secure as AD authentication. If at all possible, use Active Directory (AD) rather than local Windows security. Local Windows authentication is still far more secure than individual PI user accounts.