Configure Directory Security for Modified Folder Locations

During a default installation, Plant SCADA's user and data directories are installed here:

"%PROGRAMDATA%\AVEVA Plant SCADA <VersionNumber>"

The folders have Windows® access control lists (ACLs) applied to them to avoid unauthorized access and to enable the operation of required services.

However, path substitutions and the following INI parameters can be used to specify a different location for these directories following installation.

• [CtEdit]Config - specifies where configuration files are located.

• [CtEdit]Data - specifies where data files are located.

• [CtEdit]Logs - specifies where the log files are located.

• [CtEdit]Starter - specifies where the starter projects are located.

• [CtEdit]User - specifies where databases are located.

If you have used a path substitution or adjusted the default value for one of these parameters in a Citect.ini file or a profile, you need to manually configure the access control list for the new folder location. This is required to match the permissions that are applied to these folders during installation.

To configure the access control list for a new system folder location:

1. In Windows Explorer, browse to the location where the system folder was originally installed.

   For example, the default location for the Config folder is:

   %PROGRAMDATA%\AVEVAPlant SCADA2023\Config

2. Open the properties for the folder and go to the Security tab.

3. Keep the properties dialog open and browse to the new location for the system folder (as specified in your INI settings).

4. Open the folder properties for the new location, and go to the Security tab.

5. Edit the Group or user names list for the new location so that it matches the settings for original folder.

   The groups and users (and the permissions they require) will be different for each folder type. You need to confirm that you copy the appropriate settings to a new folder location.

   Ensure you include any service accounts that have access to the default location. When entering a service account in the Select Users or Groups dialog, you must prefix with "NT SERVICE\" (for example, "NT SERVICE\Citect Runtime Manager"). Select the local computer instead of any domain in the From this location field.

6. You then need to disable any inherited permissions for the folder via the Advanced button on the Security tab.

See Also

Directory Security

Security Roles