Solved

How to make a OPC Server "wide open"

Posted on 2009-05-14
3
649 Views
Last Modified: 2013-12-04
I have a environment where security of OPC provided data is not really of concern. One station should read some data via OPC from another PC.

To simplify things with user accounts, domains, and all that other nasty security stuff, I like to make the OPC server component running on the "server" side as wide open as possible - means everybody with a windows machine who is able to ping that server should be able to read those provided data values with an appropriate client software.

Think of it as temperature and stocked amount of the coke vending machine - interesting to all, but not of security concern.

What do I need to do to rip such a security hole into the server ?
0
Comment
Question by:frankhelk
3 Comments
 
LVL 2

Accepted Solution

by:
sfrancy earned 250 total points
ID: 24434778
You can set your default DCOM permissions to add "Everyone" for both the launch and access permissioins.  Everyone does not mean anyone though.  This will work if the user can authenticate against your OPC server, meaning that user account must be recognized by the server.  If everything is in a domain, then you won't have a problem.  If you are using workgroups, then the user accounts of your clients must also exist on your server with the same passwords.

It is usually good to start this way (wide open), but after you have things working, you should refine your security to only the users who need access.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Port 808 is being blocked 9 58
Outlook keeps opened file locked 2 55
Bios question 14 32
network error 8 34
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…

910 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now