Problem Summary
In PCS 7 V6.0.1.1 multi-station configurations with two OS servers, one Engineering Station (ES), and four OS clients running Windows 2000, alarm messages are visible on the server and ES picture trees but every OS client reports no connection with server in the WinCC Alarm Control message window. As a result, operators on the client cannot filter the message list by plant zone or message class, even though the same PDL files render correctly on the server side. Within the OS Project Editor invoked on the client, several fields, check boxes, and option buttons appear greyed out and cannot be edited, while the identical dialog on the server remains fully editable.
The symptom set is specific to V6.0.x and earlier: WinCC Alarm Logging Runtime on the client opens, but the client cannot subscribe to the server-side tag archive or to the message archive because the OS package was either never imported, imported against the wrong server alias, or assigned with a client license that does not include OS Client RT with package import rights.
Affected Versions and Platforms
| Component | Affected Version | Status |
|---|---|---|
| SIMATIC PCS 7 | V6.0.1.1 (including V6.0 SP3 / V6.0 SP4 ES Service Packs) | Confirmed affected |
| SIMATIC WinCC Explorer (OS Runtime) | V6.0 / V6.0 SP3 / V6.0 SP4 | Confirmed affected |
| Windows Server / Workstation | Windows 2000 Professional / Server with SP4 | Affected platform |
| Windows Server / Workstation | Windows XP Professional SP2 | Potentially affected |
| SIMATIC PCS 7 | V7.0 and later | Different symptom path; see upgrade notes |
PCS 7 V6.0 OS Server/Client Architecture
PCS 7 V6.0 follows a strict client/server topology. The ES holds the master project database (the CFC/SFC engineering data and the WinCC graphics database). Each OS server hosts its own alarm logging runtime and tag logging runtime and is fed by an S7-400 AS via the S7 Protocol Suite channel. OS clients do not connect to the AS directly; they connect to the assigned OS server through the WinCC server data and read the published tags and messages from the server's package.
Each client must receive a compiled package from its preferred server. The package contains the alarm logging segment, the tag logging segment, the text library, the user administrator exports, and the picture tree topology. Without a valid, current package on the client, the WinCC Alarm Control reverts to no connection with server the moment an operator presses a message filter button.
Root Cause Matrix
| ID | Probable Cause | How It Presents | Confirm By |
|---|---|---|---|
| R1 | Server data not imported on client | OS Project Editor "Server data" node shows default entries; picture tree works, alarm list shows "no connection with server" | Check WinCC Explorer → Server Data on the client; verify the configured server name matches the OS server computer name |
| R2 | Wrong server alias / preferred server | Client connects to fallback server only; message classes from primary server never arrive | WinCC Explorer → Server Data → Preferred Server tab; cross-check against the server's package file name |
| R3 | OS Client license missing RT package import right | OS Project Editor fields appear deactivated (greyed out) on client, active on server | Automation License Manager on client; verify OS Client RT (6AV6 371-1CA06-0AX0 family) is present and not just an OS Engineering RT |
| R4 | DCOM / RPC authentication mismatch (Windows 2000) | Intermittent connection loss; GDI leak on client; "no connection with server" after 2–5 minutes | dcomcnfg.exe → Default Authentication Level = Connect on every node |
| R5 | Alarm Logging Runtime not enabled in client startup list | Server-side alarm logging runs, client-side never starts; message frame empty without error popup | WinCC Explorer → Computer → Properties → Startup tab → check "Alarm Logging Runtime" |
| R6 | User Administrator not synchronized | Graphical pages render, alarm filter buttons disabled, OS Project Editor controls greyed | WinCC Explorer → User Administrator; compare user list and group rights between server and client |
| R7 | Local firewall or NetBEUI / TCP port 102 blocked | Server visible in network neighbourhood, but no OPC DCOM handshake completes | telnet <server> 102 from client; verify S7 communication path is open |
| R8 | Filter PDL wired to a client-only internal tag | Filter dialog opens, selection changes, but message list is not refreshed | Open PDL in Graphics Designer on the ES and inspect the dynamic dialog behind the filter button |
Prerequisites
- Identical domain or workgroup membership across ES, both OS servers, and all four OS clients. Mixed workgroups (server in WORKGROUP, clients in a Windows 2000 domain) produce RPC authentication faults that surface as "no connection with server".
- Same Windows 2000 user account name and password used for the WinCC service login on every node (the WinCC service account, not the interactive user).
- OS Client Runtime licenses installed and active in Automation License Manager on every OS client.
- The ES project directory is shared read-only (\<ES>\<project>$) and reachable by all OS servers and OS clients.
- WinCC Alarm Logging and Tag Logging segments compiled on the OS server at least once after the most recent CFC / SFC download.
- Network connectivity: TCP port 102 (S7), TCP 135 (DCOM endpoint mapper), and the dynamic DCOM range (1024–65535) open between server and clients.
Step-by-Step Resolution Procedure
Step 1 — Verify OS Project Editor Is Operating Against a Client Computer Type
- On the ES, open SIMATIC Manager and select the OS client station.
- Right-click → OS Project Editor → confirm the dialog opens with the Computer target set to the correct client name (not the server).
- Switch the Target OS Computer field at the top of the editor from the server to each client, in turn, and save.
- If controls are still grey, the OS Client Runtime license is missing on that node (R3).
Step 2 — Enable Alarm Logging Runtime in the Client Startup List
- On the OS client, open WinCC Explorer.
- Right-click Computer → Properties → Startup tab.
- Enable Alarm Logging Runtime. Optionally enable Graphics Runtime and Tag Logging Runtime if the client also displays trends.
- Confirm the configured start order: Alarm Logging Runtime must start before Graphics Runtime, otherwise the Alarm Control subscribes before the segment is loaded and the connection attempt fails.
Step 3 — Import the Server Data on the Client
- On the OS client, open WinCC Explorer.
- Right-click Server Data → Import.
- Browse to the server's compiled package, by default:
\\<OS_SERVER>\<project_name>\OS\<server_name>\Packages\<server_name>_<yyyy-mm-dd>_<hh-mm>.pck - Choose the desired Import Type: Complete import with picture tree update for first-time clients; Update only for clients already synchronized.
- Click Import. The progress bar must reach 100 % and report Import successful. Any Access denied, File not found, or License missing line stops the process.
Step 4 — Set the Preferred Server for the Client
- Still on the client, open Server Data in WinCC Explorer.
- Switch to the Preferred Server tab.
- Select the OS server that owns the zone(s) the operator should monitor.
- Verify the Server name field matches the Windows computer name exactly (case sensitive in some DCOM versions). Mismatched case is the most common cause of the "no connection with server" popup when the server is otherwise reachable.
Step 5 — Synchronize the User Administrator
- On the OS server, open WinCC Explorer → User Administrator.
- Right-click the user group that holds the operator level (typically OperatorLevel1).
Verify Authorization for area: Authorization 6 — Operation for filter access, and Authorization 5 — Process controlling if the operator needs to acknowledge alarms. - Export the user list: File → Export →
.udlfile in\\<OS_SERVER>\<project>\OS\<server>\UserSvr. - On each OS client, open WinCC Explorer → User Administrator → File → Import and select the exported file.
- Close and re-open WinCC Runtime on the client.
Step 6 — Configure DCOM Defaults on Every Node
- Run
dcomcnfg.exeon the OS server and each OS client. - Under Default Properties set:
• Default Authentication Level = Connect
• Default Impersonation Level = Identify - Under Default Protocols ensure Connection-oriented TCP/IP is listed first.
- Restart the WinCC services:
net stop "SIMATIC WinCC Runtime" && net start "SIMATIC WinCC Runtime".
Step 7 — Validate the Picture Tree Filter on the PDL
- Open the alarm PDL on the ES in Graphics Designer.
- Select the WinCC Alarm Control object.
- In the configuration dialog open the Message Blocks tab and confirm Date, Time, Number, State, Class, Type, Text are visible.
- Open the Selection tab. For each filter row, verify the Message Class and Plant Section columns reference server-side tag names, not local tags. A common bug is binding the filter to a client-internal tag such as
@local::FilterPlant; this compiles, opens the dialog, but cannot evaluate, and the Alarm Control reports "no connection with server".
Verification Procedure
- On the OS client, launch WinCC Runtime.
- Trigger a test alarm: from the ES, force a process tag connected to a message class on the primary server (e.g., set a limit-violation flag).
- Verify the alarm appears in the client message list within two seconds (default acknowledgement / display latency in PCS 7 V6.0).
- Click the Filter dialog on the client, select a specific plant zone, click OK. The list must refresh without producing the "no connection with server" popup.
- Switch the client preferred server to the redundant server. The list must continue to show historical and live messages.
- Open Alarm Logging — Archive Browser on the client and verify short-term archive entries are visible. If only live messages appear, the alarm archive connection to the server-side Tag Logging is broken (R7).
Field-Proven Diagnostics
Quick Connectivity Test
From an OS client command prompt run the following. Successful output confirms DCOM, RPC, and the OPC server tunnel are open:
net view \\\\OS_SERVER_01
ping -n 2 OS_SERVER_01
telnet OS_SERVER_01 102
telnet OS_SERVER_01 135
WinCC Internal Diagnostics
Enable the WinCC channel diagnostics for the OS server's S7 Protocol Suite:
- WinCC Explorer → Tag Management → right-click the S7 channel → System Parameters → Logging.
- Set Trace mode = Short and Trace file =
C:\Siemens\WinCC\Diagnose\S7_Trace.log. - Reproduce the "no connection with server" on the client, then inspect the log on the server for OPC_DA: read failed or connection timeout.
Registry Inspection
Confirm WinCC recognizes the OS Client Runtime license on the node:
reg query "HKLM\SOFTWARE\SIEMENS\AUTSW\WinCC\RT" /v "LicenseState"
reg query "HKLM\SOFTWARE\SIEMENS\AUTSW\WinCC\RT" /v "ProjectPath"
LicenseState must equal 0x01. ProjectPath must point to the client project folder that contains the imported package.
Licensing Pitfalls
| License Key (MLFB) | Function | Required On |
|---|---|---|
| 6AV6 371-1CA06-0AX0 | WinCC V6.0 OS Client RT (PO 100) | OS Client |
| 6AV6 371-1CA16-0AX0 | WinCC V6.0 OS Client RT (PO 256) | OS Client |
| 6AV6 371-1CK06-0AX0 | WinCC V6.0 OS Server RT | OS Server |
| 6ES7 658-5XX06-0YD5 | PCS 7 V6.0 OS Engineering (ES) | ES only |
Operating-System-Specific Pitfalls (Windows 2000)
-
ForceGuest registry. Windows 2000 defaults to ForceGuest = 1 under
HKLM\System\CurrentControlSet\Control\Lsa. Set this to0on every node, otherwise the WinCC service account is mapped to the Guest profile and the Alarm Control cannot write back acknowledgements. - DCOM port range. On Windows 2000 the default dynamic port range is 1024–5000. If a corporate firewall only opens 1024–2000, narrow the client/server conversation and break the alarm subscription.
- DEP and ATSvc. Disable Data Execution Prevention on the OS server's WinCC process if service packs introduced it; WinCC V6.0 was not tested with hardware DEP.
- Time skew. Kerberos rejects requests when client/server clocks differ by more than 5 minutes. PCS 7 V6.0 alarms carry a UTC stamp; a 10-minute drift will cause the server to drop the client subscription silently.
Troubleshooting Matrix
| Symptom | Likely Cause | Action |
|---|---|---|
| Message list empty on client, server fine | Server data not imported (R1) | Run Step 3 on each client |
| Filter button disabled on client | Operator lacks Authorization 6 (R6) | Run Step 5; raise group level |
| "no connection with server" popup on filter only | Filter bound to client-internal tag (R8) | Run Step 7; rebind to server tag |
| OS Project Editor fields greyed on client | Missing OS Client RT license (R3) | Install 6AV6 371-1CA06-0AX0 or successor |
| Intermittent connection loss every few minutes | DCOM authentication mismatch (R4) | Run Step 6 on every node |
| Graphics fine, alarms never start | Alarm Logging Runtime disabled (R5) | Run Step 2 |
| List shows live, no archive | Tag Logging segment missing (R1 variant) | Recompile OS server, re-import package |
| Only client 1 of 4 fails | ForceGuest or DCOM setting on that node | Check HKLM registry on the failing node only |
Differences from PCS 7 V7.0 and Later
If the project is upgraded in-place to PCS 7 V7.0 or later, the OS Project Editor is replaced by the Plant View in SIMATIC Manager, and the "no connection with server" popup is replaced by the Server not available status indicator inside the WinCC Alarm Control footer. The package import model also changes: V7.0 uses the Server Data — Automatic Update dialog and per-server publication of picture tree segments. The procedures above apply only to V6.0.x; for V7.0+ refer to the current PCS 7 Operator Station manual.
References in Engineering Notes
- Siemens Industry Online Support — portal for PCS 7 V6.0 service packs and KB articles.
- PCS 7 V6.0 OS Configuration Manual (entry ID 23315944) — canonical reference for OS Project Editor usage.
- WinCC V6.0 Information System — Server/Client Configuration — licensing, package import, and DCOM prerequisites.
FAQ
Why do OS clients in PCS 7 V6.0.1.1 show "no connection with server" while the OS server and ES work?
Because the OS client has not imported the OS server's compiled package, or because the imported package points to the wrong server alias. Open WinCC Explorer on the client, choose Server Data → Import, browse to the server's .pck file under \\OS_SERVER\<project>\OS\<server>\Packages, and confirm the Preferred Server tab matches the server computer name exactly.
The OS Project Editor on the client has greyed-out controls — what license is missing?
The OS Client Runtime license must include package import rights. In Automation License Manager verify an OS-Client RT key (for V6.0.x the MLFB family is 6AV6 371-1CA0x-0AX0) is present and not just the Engineering RT key. Without the import right, every action under Server Data and most of OS Project Editor are disabled by design.
How do I enable alarm logging on the OS client side?
On the OS client open WinCC Explorer, right-click Computer → Properties → Startup tab, check Alarm Logging Runtime, and ensure it starts before Graphics Runtime. The WinCC service SIMATIC WinCC AlarmLogging must be set to Automatic and log on with the same domain account as the OS server.
Alarm filter by zone works on the server but not the client. Where is the binding wrong?
Open the alarm PDL on the ES in Graphics Designer, select the WinCC Alarm Control, and review the Selection tab. The Plant Section and Message Class filter columns must reference server-side tag names; a client-internal tag (for example @local::FilterZone) opens the filter dialog but cannot evaluate server messages, which makes WinCC display "no connection with server" when the operator clicks OK.
Do I need the same Windows 2000 user and password on the OS client and OS server?
Yes. The WinCC service must log on with identical credentials on every node, and the user account must be a member of the local Administrators group on each computer. Mixed credentials or different passwords cause the DCOM handshake to fail and produce the same "no connection with server" symptom even when TCP connectivity is fine.