Sure you can implement security as a peer network with workstation accounts and local security policy. Any more than about 5 workstations would be agony to administer. The DC provides central authentication and system wide group security policies. It's a management tool and the only load on the system is mostly downloading policies upon workstation boot-up and authentication upon user log in. Thank you, Ken Heywood Calibration Laboratory Manager 401 Industrial Drive Plymouth MI 48170 http://www.processcontrolservices.com KHeywood@xxxxxxxxxxxxxxxxxxxxxxxxxx Telephone: 734-453-0620 Facsimile: 734-453-6008 Wireless: 508-241-2040 PCS means Providing Customer Satisfaction CHECK YOUR ORDER STATUS ONLINE AT http://www.processcontrolservices.com/Customer/customer_login.asp dcs service and parts - plc service and parts - process instrument installation, service and parts - process instrument and module repairs iso/iec 17025 accredited instrument and test equipment calibrations - hmi engineering - temporary and resident technical staffing -------------------------------------------------------------------------- PROCESS CONTROL SERVICES, INC. DISCLAIMER This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify PCS immediately by replying to the message and deleting it from your computer. Messages sent to and from PCS may be monitored. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily represent those of PCS. -------------------------------------------------------------------------- -----Original Message----- From: foxboro-bounce@xxxxxxxxxxxxx [mailto:foxboro-bounce@xxxxxxxxxxxxx] On Behalf Of andreas.weiss@xxxxxxxxx Sent: Thursday, August 05, 2010 9:07 AM To: foxboro@xxxxxxxxxxxxx Subject: Re: [foxboro] 8.5 Domain Controller Hi Russ, > Security is a choice. > ... > For those not required to be compliant....load V8.5 unsecure and go on as usual... we want a secure DCS environment. Do you really believe that installing a 8.5 Domain Controller increases the security? It depends on what you measure. I think that putting additional load on the MESH network increases the unreliability of the network. It is good to read that Development will change this in V8.7. Regards, Andreas _______________________________________________________________________ This mailing list is neither sponsored nor endorsed by Invensys Process Systems (formerly The Foxboro Company). Use the info you obtain here at your own risks. Read http://www.thecassandraproject.org/disclaimer.html foxboro mailing list: //www.freelists.org/list/foxboro to subscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=join to unsubscribe: mailto:foxboro-request@xxxxxxxxxxxxx?subject=leave