Emerson Exchange 365

How to Change DeltaV Administrator password

Hello All :

I want to discuss the issue can same user name of Administrator have 2 different passwords as i have seen then what does it mean

example administrator   pwd is  123

Administrator pwd is 123123

normally username  administrator   pwd is  123 is used
username  administrator  pwd 123123 is used once when re run the configuration of actual fhx...(at that time it was not accepting the pwd 123)

now username administrator   pwd is  123  is  also used in operator stations only when change required in limit and then back to op user name and pwd and yet engineering station also use user name : administrator   pwd is  123

i want to change the pwd 123 of administrator as operators came to know the pwd...at Hlp document is quite confusing .....

user manager  and  servpwd.exe

if i used user manager for username administrator   pwd is  123  to change the pwd what steps shall i follow so that operator station  username administrator   pwd is  also changed

if find any difficulty  to understand just tell me how to change the password in engineering station and then what to do in operator station for Administrator in steps

Sami Uddin

• 14 Jul 2016 12:27 PM
• Cancel

8 Replies

• Alexandre Peixoto

  

  • 14 Jul 2016 2:08 PM

  Hi thickwall,
  
  we may need to get more details of your specific application to better understand this issue you are describing where the same user has two different passwords within the same system - this is not how DeltaV systems work and possibly could be a misunderstanding of how DeltaV system accounts are handled.
  
  Either way, I believe it is important to understand what exactly you are trying to accomplish here and I'm providing below a summary that can be referenced to describe the different DeltaV account types:
  
  - DeltaV user accounts: these are the accounts DeltaV users utilize to log into DeltaV systems, and are managed by DeltaV User Manager. When DeltaV users are enabled, they also have to be associated to a Microsoft Windows account and a single password is associated to each user. Any changes to these accounts are done via the DeltaV User Manager application.
  
  - DeltaV service account: this is the 'DeltaVAdmin' account which is used by DeltaV applications and not users. DeltaV users shall not log into DeltaV using the DeltaVAdmin account. Only DeltaV system administrators shall have access to this account and know its credential to prevent misusage. This service account is managed using the ServPwd application, or by running the DeltaV Security Administration application in v13.3.
  
  - DeltaV built-in application accounts: these accounts are in fact service accounts as well, and shall not be used to log into DeltaV systems by users either. Each one of these accounts have a specific management tool (in v13.3 the DeltaV Security Administration application allows easy management on a per machine basis). Examples of built-in application accounts are: DVBatchAdmin, SoftPhaseUser, DVPEHAdministrator, etc.
  
  - Windows Administrator account: this is the default Microsoft Windows administrative account (named as 'Administrator' on some systems) which should be disabled, preceded by a different admin account creation to increase the security level for Windows machine admin access. This process can also be performed using the DeltaV Security Administration application in v13.3.
  
  With all that said, your Operator accounts' password should be completely managed within the DeltaV User Manager application. Once changed, they will use their credentials to log into Windows and DeltaV (same credentials for both logins). The same process applies to users that have DeltaV administration privileges (as users, not service), and therefore credentials are also managed at the DeltaV User Manager application in this case.
  
  You could plan to contact an Emerson Local Business Partner or Field Sales Office to provide assistance on DeltaV systems account management to make sure your system is running accordingly. Or the Emerson's Global Support Center (GSC) can also be contacted to provide assistance with your deployment.
  
  Feel free to share additional information through this channel and I'll try my best to support you as well.
  
  I hope the message is clear!
  
  Regards,
  
  Alexandre Peixoto

  • Cancel
• Michael Moody

  

  • 14 Jul 2016 2:11 PM

  I have never looked into having multiple passwords for the same user account. Not sure that is possible.
  
  One recommendation is to not actively use the administrator account, but to create specific users with admin level access as needed. This allows you to grant multiple users access as needed, but still maintain accountability.
  
  Changing passwords should not be a confusing task, as the user manager should be the normal method. The servpwd.exe utility is used to change the DeltaVadmin password and update throughout the DeltaV System. This user account should not be used by users for logging into the system, but is used by system accounts & utilities.

  • Cancel
• Youssef.El-Bahtimy

  

  • 14 Jul 2016 9:15 PM

  It seems to me that you are using a workgroup rather than a domain. In this case, when you change the password for an account, you must change it on all workstations. This is not a recommended setup, however if you only have 2 workstations and you are not giving out unique individually traceable user IDs, then it may suffice.
  
  I recommend (during your next upgrade or maintenance window, perhaps) to switch your system to use a domain and assign individual accounts to each person using the system. This will allow your system to scale easily, and provide the ability to audit operating activity by individual user.
  
  In the short term, changing password is not even something you need to do from user manager. You can just click 'Change Password' from DeltaV Logon on each workstation. If you are using a shared operator account, this feature will allow any operator to change the account password, and you will want to ensure in this case that the operator user is set up to not be able to change their own password (as it will affect other users).

  • Cancel
• Andre Dicaire

  

  • 15 Jul 2016 10:42 PM

  In reply to Alexandre Peixoto:

  Thickwall,
  
  Alexandre has provided some valuable insight you should consider.
  
  Windows Users have one password. You can have the same user name in different domains or local accounts on computers, each with their own password. These are all different windows accounts, so you have to administer each separately. In DeltaV User Manager there is an option to associate the DeltaV User Name with a specific account (default), or make the user name generic. Making the account generic allows any authenticated Windows user of the same name to logon to DeltaV as that user. The DeltaV user can be linked to a local user, a Domain user, or open for any user of the same name.
  
  So you could have a DeltaV User with different passwords if you have separate accounts with the same name. I would not recommend this. It complicates user administration and would be considered a security risk

  Andre Dicaire

  • Cancel
• Sami Uddin

  

  • 17 Jul 2016 9:19 PM

  Thank You Mr Michael Moody...Mr Alexandre peixoto...Mr Youssef.El-Bahtimy.....Mr Andre Dicaire....yes we are using a workgroup...

   

  Let me share with some detail information

  
  

  Windows

  
  

  Computer Name: EWS

  Full Compter name : EWS

  WORKGROUP :   WORKGROUP

   

  User Profiles                                 MODIFIED

  
  

  Defualt Profile                                 9/26/2015

  EWS/Administrator                          7/17/2016

  EWS/DeltaVadmin                           7/17/2016

  EWS/Emerson                                 9/28/2015

  
  

  Type  and Status is local

  
  

  Now Information regarding Delta V user Manager User's

  
  

  User Name                                 Full Name                          Description

  
  

  ADMINISTRATOR                                                                Built In account for administrating the computer/domain

  CONFIGURE                                                                        Delta V account for system configuration users

  DVEasySecurityUser               Easy Security User                  Built Account for deltav Easy Secuity

  Emerson

  Guest                                                                                    Built In account for guest access to the computer /domain

  MAINTAINER

  OPERATOR                                                                            delta v account for plant operators

  SIS_CONFIGURE                                                                  delta v account for configuring sis

  SOFTPHASEUSER                                                                deltav service account , do not modify or assign to any users

  SUPERVISOR                                                                        delta v account for plant supervisors

  
  

  User Name : ADMINISTRATOR   (default role with Delta V Administrator and Windows Administrator)

  Password  : 123456

  
  

  now from engineering station i changed the password to 1234567890 for user name ADMINISTRATOR 

  
  

  and did not uncheck the Password never expires then again i did same with uncheck password never expires and check  password change in next log on

  
  

  after re log on pwd was changed and downloaded the ews setup data and bring the check on password never expires and uncheck change in next log on 

  
  

  op01 downloaded  (operator stations)

  op02 downloaded (operator stations)

  
  

  but User ADMINISTRATOR pwd in Operator stations is not changed ...

  
  

  i understand to make new user name with Administrative rights and ill be doing the same but for now i have to change the password for user name ADMINISTRATOR  in operator stations 

  
  

  Note  

  Operator station is taking old pwd 123456 for user name ADMINISTRATOR  Engineering work station is taking the changed pwd 1234567890 for user name ADMINISTRATOR

  
  

  Delta V Version 12.3 

  
  

  • Cancel
• Andre Dicaire

  

  • 17 Jul 2016 9:33 PM

  In reply to Sami Uddin :

  DeltaV does not distribute windows account information. In a workgroup you must administer the accounts on each computer. You should update each account on each computer so the passwords match. Downloading DeltaV setup only transfers DeltaV information such User Security for DeltaV write privilege.

  Andre Dicaire

  • Cancel
• Sami Uddin

  

  • 17 Jul 2016 10:04 PM

  User manager is not accessible in operator stations... Shud I use the change pwd.??

  • Cancel
• Andre Dicaire

  

  • 18 Jul 2016 3:28 AM

  In reply to Sami Uddin :

  You need to use Windows user manager.

  Andre Dicaire

  • Cancel