OPC Rescue Snapshot Report This OPC Snapshot report provides a list of all settings relevant for operation of OPC products on DESKTOP-H750JUT. ============================================================ 1. OPC configuration: 0 critical errors and 6 warnings Configuration warnings OPC configuration warnings may stop OPC applications from connecting. When you activate OPC Rescue, you will receive a detailed report of each warning and automatic repair capabilities. 2. Security audit score: 71% with 9 potential security vulnerabilities Overview: This OPC Security Audit report provides a list any concerns that could compromise the security of industrial information. This report includes the cause of the vulnerability, a description of vulnerability, and suggested action. Security Comment: Your security score is medium. OPC Rescue detected some security measures, but they do not provide adequate protection. Unauthorized personnel can still access (and possibly change) Automation data with relative ease. Check for full details in the "Security Audit" section. Note: The full security audit report contains more information about each of the above vulnerabilities. This information includes the cause, description, and suggested action. Activate this copy of OPC Rescue to receive the rest of this report. 3. General computer information Computer Name: DESKTOP-H750JUT Member of: The workgroup called "WORKGROUP" Interactive user: C.Velazquez Operating System Workstation (Edition: Enterprise) Version 6.2 Build 9200 .0 64-bit operating system Windows was started on 19 March 2019 at 14:22 (30 minutes ago) Miscellaneous settings "Simple File Sharing": Off "Accounts: Administrator account status": Enabled "Accounts: Guest account status": Disabled "Interactive logon: Do not display last user name": Disabled "Network access: Let Everyone permissions apply to anonymous users": Disabled "Network access: Sharing and security model for local accounts": Classic "DCOM: Machine Access Restrictions in SDDL syntax": Not defined "DCOM: Machine Launch Restrictions in SDDL syntax": Not defined Data execution prevention (DEP) Status: OPC Rescue cannot determine DEP settings for Application Exceptions: None 4. Windows firewall OPC Rescue does not support the firewall configuration for yet 5. Computer-wide DCOM settings General tab The settings in this tab are not relevant for OPC Options tab The settings in this tab are not relevant for OPC Default Properties tab Enable Distributed COM on this computer: Checked Enable COM Internet Services on this computer: Unchecked Default Authentication Level: Connect Default Impersonation Level: Identify Provide additional security for reference tracking: Unchecked Default Protocols tab Connection-Oriented TCP/IP (Specific port ranges are not defined) MSDTC tab The settings in this tab are not relevant for OPC COM Security tab Launch and Activation Permissions Edit Limits (computer-wide launch and activation permissions) Name: Everyone local launch allowed local activation allowed Name: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES local launch allowed local activation allowed Name: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: BUILTIN\Administrators (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: DESKTOP-H750JUT\DeltaVAdmin (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: BUILTIN\Performance Log Users (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: BUILTIN\Distributed COM Users (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Edit Default (default launch and activation permissions) Name: Everyone local launch allowed Name: NT AUTHORITY\SYSTEM (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: BUILTIN\Administrators (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: DESKTOP-H750JUT\DeltaVAdmin (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Name: NT AUTHORITY\INTERACTIVE (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Access Permissions Edit Limits (computer-wide access permissions) Name: Everyone (all permissions allowed) local access allowed remote access allowed Name: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES local access allowed Name: APPLICATION PACKAGE AUTHORITY\ALL APPLICATION PACKAGES local access allowed Name: DESKTOP-H750JUT\DeltaVAdmin (all permissions allowed) local access allowed remote access allowed Name: BUILTIN\Performance Log Users (all permissions allowed) local access allowed remote access allowed Name: BUILTIN\Distributed COM Users (all permissions allowed) local access allowed remote access allowed Name: ANONYMOUS LOGON local access allowed Edit Default (default access permissions) Name: DESKTOP-H750JUT\DeltaVAdmin (all permissions allowed) local access allowed remote access allowed Name: Everyone local access allowed Name: NT AUTHORITY\SELF (all permissions allowed) local access allowed remote access allowed Name: NT AUTHORITY\SYSTEM local access allowed Name: BUILTIN\Administrators (all permissions allowed) local access allowed remote access allowed 6. OPC client applications installed on this computer OPC Rescue does not have a record of OPC client applications on this computer Inform OPC Rescue about additional OPC client applications Select the Repair tab Click the Secure button Navigate to the OPC Port Selection dialog Click the Add Applications button 7. OPC servers installed on this computer OpcEnum (also known as "Opc ServerList Class") General Tab Application Name: OpcEnum Application ID: {13486D44-4821-11D2-A494-3CB306C10000} Application Type: Local Server Authentication Level: None Local Path: "C:\WINDOWS\SysWOW64\opcenum.exe" Locations Tab Run application where data is located: Unchecked Run application on this computer: Checked Run application on the following computer: Unchecked Security Tab Launch and Activation Permissions Name: Everyone (all permissions allowed) local launch allowed remote launch allowed local activation allowed remote activation allowed Access Permissions Name: Everyone (all permissions allowed) local access allowed remote access allowed Endpoints tab This application uses the default system protocols. See above in "DCOM Default Protocols" Identity Tab Identity is set to: The launching user OPCSniffer Class OPC server overview Vendor: Vendor did not provide this information ProgID (version dependent): Matrikon.OPC.Sniffer.1 ProgID (version independent): Matrikon.OPC.Sniffer This OPC server claims to support OPC Data Access Servers Version 1.0 OPC Data Access Servers Version 2.0 OPC Historical Data Access Servers Version 1.0 General Tab Application Name: OPCSniffer Class Application ID: {0FAAE42A-35AF-49d4-B7E5-D4D121F208F1} Application Type: Local Server Authentication Level: Default (which is set to 'Connect') Local Path: Warning! This registry key does not exist. This could cause OPC connectivity problems. Locations Tab Run application where data is located: Unchecked Run application on this computer: A registry entry for this OPC server is missing, which may cause connectivity problems. Possibly, the OPC server was uninstalled. You may have to reinstall this OPC server, or contact the vendor of this OPC server vendor to ask for the reason this setting is disabled. Run application on the following computer: Unchecked Security Tab Launch and Activation Permissions This application uses the "default launch and activation permissions" as listed above, under: "Default launch and activation permissions" Access Permissions This application uses the "default access permissions" as listed above, under: "Default access permissions" Endpoints tab This application uses the default system protocols. See above in "DCOM Default Protocols" Identity Tab Identity is set to: The launching user DeltaV OPC Server OPC server overview Vendor: Emerson ProgID (version dependent): OPC.DeltaV.1 ProgID (version independent): See comment below This OPC server does not have a version independent program identifier (this is not an error) This OPC server claims to support OPC Data Access Servers Version 1.0 OPC Data Access Servers Version 2.0 General Tab Application Name: DeltaV OPC Server Application ID: {C3B72AB1-6B33-11D0-9007-0020AFB6CF9F} Application Type: Local Server Authentication Level: Connect Local Path: Warning! This registry key does not exist. This could cause OPC connectivity problems. Locations Tab Run application where data is located: Unchecked Run application on this computer: A registry entry for this OPC server is missing, which may cause connectivity problems. Possibly, the OPC server was uninstalled. You may have to reinstall this OPC server, or contact the vendor of this OPC server vendor to ask for the reason this setting is disabled. Run application on the following computer: INQU_LAB_PP Security Tab Launch and Activation Permissions This application uses the "default launch and activation permissions" as listed above, under: "Default launch and activation permissions" Access Permissions This application uses the "default access permissions" as listed above, under: "Default access permissions" Endpoints tab This application uses the default system protocols. See above in "DCOM Default Protocols" Identity Tab Identity is set to: The launching user FTSW100 OPC DA Server OPC server overview Vendor: Vendor did not provide this information ProgID (version dependent): ABB.Bomem.Data.OPC.3 ProgID (version independent): ABB.Bomem.Data.OPC This OPC server claims to support OPC Data Access Servers Version 2.0 General Tab Application Name: FTSW100 OPC DA Server Application ID: {CA396CF6-7868-490D-BDF6-A9195CE05971} Application Type: Local Server Authentication Level: Default (which is set to 'Connect') Local Path: C:\Bomem\Enablir\dllreg\FtswOPC.exe Locations Tab Run application where data is located: Unchecked Run application on this computer: Checked Run application on the following computer: Unchecked Security Tab Launch and Activation Permissions This application uses the "default launch and activation permissions" as listed above, under: "Default launch and activation permissions" Access Permissions This application uses the "default access permissions" as listed above, under: "Default access permissions" Endpoints tab This application uses the default system protocols. See above in "DCOM Default Protocols" Identity Tab Identity is set to: The launching user DeltaV OPCAE Server OPC server overview Vendor: Vendor did not provide this information ProgID (version dependent): DeltaV.OPCEventServer.1 ProgID (version independent): See comment below This OPC server does not have a version independent program identifier (this is not an error) This OPC server claims to support OPC Alarm & Event Servers Version 1.0 General Tab Application Name: DeltaV OPCAE Server Application ID: {DD99BFB8-3571-11D3-848E-00C04F99022F} Application Type: Local Server Authentication Level: Connect Local Path: Warning! This registry key does not exist. This could cause OPC connectivity problems. Locations Tab Run application where data is located: Unchecked Run application on this computer: A registry entry for this OPC server is missing, which may cause connectivity problems. Possibly, the OPC server was uninstalled. You may have to reinstall this OPC server, or contact the vendor of this OPC server vendor to ask for the reason this setting is disabled. Run application on the following computer: INQU_LAB_PP Security Tab Launch and Activation Permissions This application uses the "default launch and activation permissions" as listed above, under: "Default launch and activation permissions" Access Permissions This application uses the "default access permissions" as listed above, under: "Default access permissions" Endpoints tab This application uses the default system protocols. See above in "DCOM Default Protocols" Identity Tab Identity is set to: The launching user 8. OPC Rescue information User information Name: Your name Company: Your company name Email: Your email address Phone: Your phone number Snapshot date: 19 March 2019 Snapshot time: 2:52:39 PM (SA Western Standard Time) Version 3.6.1303.7 Executable date is 26 November 2013 This copy of OPC Rescue has not been activated Download from www.OpcRescue.com ============================================================ End of OPC Snapshot report