Skip to main content
B
BF_1381190014-Alexandrite
14-Alexandrite
August 1, 2025
Solved

How important is it to have a local wcadmin account in Windchill?

  • August 1, 2025
  • 3 replies
  • 602 views

Hi. I was wondering if anybody can advise.

 

I have received a fresh instance of Windchill. The person who performed the install of the software on the application server did not use a new local "wcadmin" account to complete the install. Instead, the initial admin account used to perform the install was an account from our Enterprise Directory. Our LDAP server is configured to be read-only. Consequently, I have received the new Windchill instance with an inability to create local Windchill accounts - it seems it is now only possible to import users from active directory. 

 

Please can anybody advise how important it is to have at least one account in Windchill that is not an account from active directory that can be used for admin purposes?

Best answer by mmeadows-3

The solution depends on your business requirements and the flexibility of your IT department: corporate LDAP admins and cyber security.

 

If this is an unsecured environment, you can probably set up an independent read-write LDAP server and manage software administrative accounts (site admin), integration accounts (publishing admin), and development/test accounts.

 

If there are SSO or corporate LDAP exclusive requirements, then you need to ask IT to create all these additional accounts and add them to your Windchill filter group.  Depending on the purpose of the account, you can usually get them assigned non-expiring passwords.

 

3 replies

S
17-Peridot
ScottMorris17-Peridot
17-Peridot
August 1, 2025

If it were me, I would like to have the ability to create local user accounts for both Admin tasks and testing purposes. There are a number of different ways to configure user accounts in Windchill. You should open a Tech Support call with PTC to review your current configuration and get some advice from them regarding your options for adding local accounts based on the configuration. 

B
BF_1381190014-AlexandriteAuthor
14-Alexandrite
August 1, 2025

Thank you! Are you aware of how to create local accounts when the LDAP content is read-only?

jbailey
jbailey18-Opal
18-Opal
August 4, 2025

You would have to set up a second LDAP that is independent of your enterprise LDAP. Then Configure Infoengine (additional JNDI adapter) & apache to enable that adapter. You can have multiple adapters, but each one HAS to point to a unique branch of AD and usernames must be unique between adapters.

https://www.ptc.com/en/support/article/CS29454?source=search

 

The only way to create users locally in the past was to have users in Windchill DS (no longer in use) -which was an LDAP. 

 

Does your organization allow for the creation of "administrator" type accounts, where you can have users added to AD? 

M
mmeadows-316-PearlAnswer
16-Pearl
August 5, 2025

The solution depends on your business requirements and the flexibility of your IT department: corporate LDAP admins and cyber security.

 

If this is an unsecured environment, you can probably set up an independent read-write LDAP server and manage software administrative accounts (site admin), integration accounts (publishing admin), and development/test accounts.

 

If there are SSO or corporate LDAP exclusive requirements, then you need to ask IT to create all these additional accounts and add them to your Windchill filter group.  Depending on the purpose of the account, you can usually get them assigned non-expiring passwords.

 

    B
    BF_1381190014-AlexandriteAuthor
    14-Alexandrite
    August 7, 2025

    Thank you very much. I'll look into the possibility of creating an admin account added into our LDAP.

    V
    vnamboodheriCommunity Manager
    Community Moderator
    August 7, 2025

    Hello @BF_13811900, 

     

    It looks like you have some responses from some community experts. If any of these replies helped you solve your question please mark the appropriate reply as the Accepted Solution. 

    Of course, if you have more to share on your issue, please let the Community know so other community members can continue to help you.

    Thanks,
    Vivek N.
    Community Moderation Team.

    Terms & ConditionsCookie settingsAccessibility statement