02.Project Administration

Participant Guide Project Administration • Successful log in using Windows username and password • Login failure due to an incorrect Windows username and/or password • Login attempt cancelled by the user • Login failure due to the user forgetting to enter their Windows username and/or password (this is referred to as an incorrect parameter error) • Successful log out (when the user closes the TriStation 1131 project) You can view this log to determine if an unauthorized user is attempting to log in to TriStation 1131 projects. You can also use this log as a troubleshooting tool when helping a user who is having login problems. Note: If you are logged into Windows using a Guest account, you will be unable to view the Windows System Events Log. For more information, refer to Microsoft Knowledge Base Article 842209 (http://support.microsoft.com/kb/842209). The topics included are: • • Clearing the User Access Log • Viewing the User Access Log In Windows Event Viewer • Saving the User Access Log to a File • • Clearing the User Access Log • Viewing the User Access Log In Windows Event Viewer • Clearing the User Access Log Viewing the User Access Log In Windows Event Viewer This procedure describes how to view TriStation 1131 user access information in the Windows System Events Log using the Windows Event Viewer. You must be logged on to Windows as an administrator to perform this procedure. Saving the User Access Log to a File This procedure describes how to save the user access event information to a file. You must be logged on to Windows as an administrator to perform this procedure. When you save a log file, the entire log is saved, regardless of filtering options. You cannot save a log file with just the events related to TriStation 1131. Also, the sort order is not retained when logs are saved. Changing Event Logging Options Using the Windows Event Viewer, you can set the maximum size of the log and specify whether events are overwritten or stored for a certain period of time. The default logging policy is that if a log is full, the oldest events are deleted to make room for new events. Schneider Electric recommends that you change this setting to ensure that user login event information is not lost. 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 2–51 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved Internal

Project Administration Participant Guide Clearing the User Access Log When the Windows System Events Log reaches its maximum size, you will see the following error message in TriStation 1131: The event log file is full. You must manually clear all events from the event log file before new entries can be added Note: Clearing the log file will clear ALL application event information, not just events related to TriStation 1131. Schneider Electric highly recommends saving the file prior to clearing it. Lab 6 : Managing User Access Introduction In this lab, you will provide user access to controller and TriStation 1131 operations. Multiple levels of access control help prevent unauthorized access to TriStation 1131. Objectives After completing this lab, you will be able to: • Change the security setting. • Manage users. • Add and modifying user access. • Change the security level for privileges. • Change security level names. • Save the user access log to a file. • Change event logging options. • Clear the user access log. Lab Procedures Change the Security Setting 1. On the Project menu, click Security. The Security dialog box appears. 2. On the Security Setting tab, click the setting you want to use: Standard Security or Enhanced Security. Note: If both options are unavailable, you are not a level 01 user. You must be a level 01 user to change the security setting. 2–52 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved

Participant Guide Project Administration 3. Click OK. 4. If you downgraded the security setting from Enhanced to Standard, this procedure is complete. proceed to step 14 to edit users as needed. 5. If you upgraded the security setting from Standard to Enhanced, proceed to the next step. 6. When prompted, enter your Windows username and password, and then click OK. 7. If your Windows username was previously added to the project user list, and TriStation 1131 was able to successfully authenticate your Windows username and password, this procedure is complete. proceed to step 14 to edit users as needed. 8. If this is the first time you have upgraded the security setting from Standard to Enhanced, and TriStation 1131 was able to successfully authenticate your Windows username and password, the Add User dialog box appears so you can add yourself as a Windows user to the project user list. proceed to the next step. 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 2–53 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved Internal

Project Administration Participant Guide 9. In the Add User dialog box, in the Full Name field, enter or change the user’s full name. 10. In the Description field, enter or change the description for the user (for example, their job title or function). Note: You cannot change the username, because it must be the same as the user’s Windows username. 11. In the Password field, enter the user’s password. This is not the same as the user’s Windows password. You should select a different password, unique to the user’s TriStation 1131 account. Refer Options for minimum requirements. 12. In the Verify Password field, enter the new password again for verification. Note: You cannot change the security level. Enhanced Security requires at least one level 01 Windows user. 13. Click OK to save your changes. Manage Users This procedure explains how to manage users, which includes creating, modifying, and deleting TriStation 1131 users. Only users assigned to security levels 01, 02, or 03 can access the Security dialog box and view user access settings. Note: If Enhanced Security is enabled, a quick way to prevent a user from accessing TriStation 1131 is to add their Windows user account to the Windows Local Security Policy “Deny access to this computer from the network” list. Using the Print All command, you can print a Project Users report, which lists all the users that have been added to the project’s user list. 2–54 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved

Participant Guide Project Administration 14. On the Project menu, click Security, and then click the Users tab. 15. On the Users tab, click New to create a new user. For further instructions, refer to Add and Modify User Access. 16. Click Modify to modify a user. For further instructions, refer to Add and Modify User Access. 17. Click Delete to delete a user. The default level 01 user (MANAGER) can be deleted only if another level 01 user has already been created. If Enhanced Security has ever been enabled (even if it is not the current security setting), you cannot delete the last level 01 Windows user. Note: Unless you have level 01 access, you cannot add, modify, or delete users who have the same or higher security level as yourself. Thus, if you have level 03 access, you cannot add, modify, or delete users with level 03, 02, or 01 access. If you have level 02 access, you cannot add, modify, or delete users with level 02 or 01 access. If you have security level 01 access, you can add, modify, or delete other level 01 users, but you cannot delete yourself. 18. Click OK to save your changes. Add and Modify User Access 19. On the Project menu, click Security, and then click the Users tab. 20. To add a user, click Add. 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 2–55 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved Internal

Project Administration Participant Guide 21. To modify a user, click the username, and then click Modify. 22. Click OK to save your changes. Change the Security Level for Privileges 23. In the Project menu, click Security, and then click the Privileges tab. 24. On the Privileges tab, in the Operation Type area, click Controller Operations or TriStation 1131 Operations, depending on the operations you want to specify. 25. In the Operations area, click the operation, and then click the check box for the level of security to be assigned to the operation. 2–56 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved

Participant Guide Project Administration − Press Shift and click to select multiple contiguous items. − Press Ctrl and click to select multiple non-contiguous items. 26. Click OK to save your changes. Note: Because they cannot access the Privileges tab, users with security levels 04– 10 cannot perform the following tasks: Security: Add/modify users, Security: Change level descriptions, Security: Change level privileges. Additionally, you cannot remove privileges from your own security level. For example, if you are a level 03 user, you cannot remove privileges from security level 03. Change Security Level Names 27. On the Project menu, click Security, and then click the Level Names tab. 28. Enter the name to associate with each security level. 29. Click OK to save your changes. View the User Access Log In Windows Event Viewer 30. On the Start menu, click Control Panel, and then double-click Administrative Tools. 31. Double-click the Event Viewer icon. The Event Viewer window opens. 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 2–57 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved Internal

Project Administration Participant Guide 32. In the console tree, click Application. Event information appears in the details pane. 33. In the details pane, click the Source column header to sort the events by application. 34. Look for TriStation 1131 as the source type. 35. To view detailed information about a specific event, double-click the event. 2–58 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved

Participant Guide Project Administration Save the User Access Log to a File 36. In the Windows Event Viewer, display the event log with the user access information that you want to save to a file. 37. On the Action menu, click Save Log File As. 38. In File name, enter a name for the archived log file. 39. In Save as type, select a file format, and then click Save. − If you archive a log in log-file format, you can re-open it in Event Viewer. Logs saved as event log files (.evt) retain the binary data for each event recorded. − If you archive a log in text (.txt) or comma-delimited (.csv) format, you can re- open the log in other programs, such as word processing or spreadsheet programs. Logs saved in text or comma-delimited format do not retain the binary data. Change Event Logging Options 40. On the Start menu, click Control Panel, and then double-click Administrative Tools. 41. Double-click the Event Viewer icon. The Windows Event Viewer appears. 42. In the console tree, right-click Application. The Application Properties dialog box appears. 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 2–59 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved Internal

Project Administration Participant Guide 43. To increase the maximum size of the event log file, enter the value (in KB) in the Maximum log size field. 44. Click Do not overwrite events (clear log file manually). 45. Click OK to save your changes. Clear the User Access Log 46. On the Start menu, click Control Panel, and then double-click Administrative Tools. 47. Double-click the Event Viewer icon. The Windows Event Viewer dialog box appears. 48. In the console tree, right-click Application, and then select Clear all events. 49. When prompted to save the log before clearing it, click Yes. 50. Select the location where you want to save the file, and then click Save. The file is saved to your selected location, and the current log file is cleared. 2–60 8602 Triconex General Purpose (Tri-GP) Configuration and Implementation A.0 Schneider Electric Proprietary and Confidential Information © 2021 Schneider Electric Systems USA, Inc. All Rights Reserved