Scenarios (examples) Domain (AD; Active Directory) Workgroup (WG)
Devices are added (e.g. 
printer, fax or scanner). 
The devices are announced by AD. Devices not announced.
The information for connecting to the device 
must be known.
The security settings can be made centrally for 
each device.
Each user that uses the device must be created 
locally at this PC station and log on with local 
user information.
One user uses multiple 
computers.
The user profile can be saved centrally.
This applies the settings to all PC stations at 
logon.
The user has a local profile on each PC station.
If the profile is not saved centrally, every user 
will have their own local profile.
The lists above are not weighted in terms of importance; you must determine which advantage 
or disadvantage is the most significant for the PCS 7 plant in question.
Setting package size for communication (MTU size) 
As of PCS 7 V8.1 SP1, the MTU (maximum transmission unit) size must be set for all computers 
located in the PCS 7 plant. 
● Setup makes the necessary settings on computers with installed PCS 7 components.
● The MTU size has to be set to 1494 bytes for all components without a PCS 7 installation.
This can be done on computers without a PCS 7 installation (e.g. domain controller and 
file server) or network components based on Windows (e.g. Automation Firewall) using the 
tool "set_mtu_size_to_1494.exe".
– You can find the "set_mtu_size_to_1494.exe" tool on the PCS 7 DVD 2 in the folder 
Additional_Products > MTU.
Documentation on the tool can be found in the same folder.
– An administrator must execute this file on all computers on which no PCS 7 components 
are installed.
Additional information
● Section "PC configuration security settings (Page 62)"
● You can find additional information on the Internet: www.siemens.com/pcs7-documentation 
(www.siemens.de/pcs7-documentation)
You can find the following manuals via the link:
– PCS 7 Security Concept; Recommendations and Notes
– SIMATIC Process Control System PCS 7; Security concept PCS 7 & WinCC - Basic 
document
– SIMATIC Process Control System PCS 7; Support and Remote Dialup
– SIMATIC Process Control System PCS 7; Patch management and security updates
– SIMATIC Process Control System PCS 7; Managing virus scanners
Installing PC stations
5.2 Workgroup and domain
PCS 7 - PC Configuration (V8.2)
56 Installation Manual, 03/2016, A5E36200050-AB