Specifications

Niagara Release 2.3
Revised: May 22, 2002 Niagara Networking & Connectivity Guide
Chapter 3 Connecting on a LAN
Connecting an Engineering PC
3–6
The second level of Windows security is Windows Domain (in a Windows NT
environment) or Active Directory (in a Windows 2000 environment) security.
Accounts that are added to a Windows Domain or Active Directory (AD) can access
both the local host and other hosts and resources in the Domain or Active Directory,
when granted the appropriate permissions.
When a login account is added to either local or Domain/AD security, it can be
assigned to a group. Groups are used to assign permissions for access to resources
(like files or printers or e-mail) to like accounts. Both local and Domain/AD security
contain several built-in groups that have special permissions. One of these groups is
the Administrators group. An account in the Administrators group of either the local
host or the Domain/AD has full permissions on the local host (if in the Administrators
group of the local host) or the Domain/AD (if in that Administrator’s group). The
built-in Administrator account is a member of the Administrators group. The Guest
account is in the Guests group, which has restricted permissions and can only access
limited resources on the host.
Niagara was designed with support for local security
only on all hosts. That makes
our software portable to hosts running many different operating systems.
For Niagara hosts running Windows NT or Windows 2000, any Niagara host account
that you create with the Users tab of the Admin tool is actually added to local
Windows user security. This means you cannot use a Domain or AD user as an
Niagara host administrator account. Further, any Niagara administrator account you
add is actually added to the local Windows Administrators group, which means it has
full permissions on the local host.
Note By default, JACE-NPs ship with the two built-in accounts (Administrator and
Guest). However, the Guest account is disabled (for security). In addition, another
administrator account is present and enabled (on many hosts, this account is named
tridium). This is the account you typically use to log into the host when using the
Admin Tool.
Connecting an Engineering PC
The following sections provide a brief overview of connecting an engineering PC to
the LAN.
Typically, each engineering PC (be it a Web Supervisor or technician PC) will have
a single NIC with a female 10/100-Mbit Ethernet connector. This provides the
connection point of the PC to the Ethernet LAN.
Windows NT 4.0
Use the following procedure to attach a Windows NT 4.0 engineering PC to a LAN.
These instructions assume that the network card has been installed, Windows has
been loaded, and TCP/IP networking has been installed.