An electric motor assembly comprising: a housing having an interior volume; said housing containing in said interior volume an electric motor (19, 119), a motor driver (22, 122) and a secondary power source (23, 123A, 123B); said electric motor comprising a stator and a mover mounted for movement relative to one another; said electric motor operatively configured to connect to a primary power supply (42, 142); said mover of said electric motor operatively configured to mechanically couple to an object (40, 140, 240) external to said interior volume of said housing to be driven by said electric motor within a range of motion (45, 145) and having a safe position (46, 146) within said range of motion; said electric motor connected to said secondary power source; said stator comprising a primary winding (24A, 24B, 24C) operatively configured to move said mover in a normal operation mode; said stator comprising a secondary winding (25A, 25B, 25C) operatively configured to move said mover in a secondary operation mode (80, 100); said motor driver comprising a primary motor controller (26, 126) operatively configured to control said primary winding in said normal operation mode; said motor driver comprising a secondary motor controller (28, 128) operatively configured to control at least one of said primary winding and/or said secondary winding in said secondary operation mode; a first power sensor configured to sense a fault in said primary power supply and communicating with said secondary motor controller; a second power sensor configured to sense a fault in said secondary power source and communicating with said secondary motor controller; a primary winding sensor (33A, 33B, 33C) configured to sense a fault in said primary winding and communicating with said secondary motor controller; a secondary winding sensor (34A, 34B, 34C) configured to sense a fault in said secondary winding and communicating with said secondary motor controller; said secondary motor controller configured to drive said motor to said safe position using said secondary winding in the event of a sensed fault in said primary winding; and said secondary motor controller configured to drive said motor to said safe position using said secondary power source in the event of a sensed fault in said primary power source. a housing having an interior volume; said housing containing in said interior volume an electric motor (19, 119), a motor driver (22, 122) and a secondary power source (23, 123A, 123B); said electric motor comprising a stator and a mover mounted for movement relative to one another; said electric motor operatively configured to connect to a primary power supply (42, 142); said mover of said electric motor operatively configured to mechanically couple to an object (40, 140, 240) external to said interior volume of said housing to be driven by said electric motor within a range of motion (45, 145) and having a safe position (46, 146) within said range of motion; said electric motor connected to said secondary power source; said stator comprising a primary winding (24A, 24B, 24C) operatively configured to move said mover in a normal operation mode; said stator comprising a secondary winding (25A, 25B, 25C) operatively configured to move said mover in a secondary operation mode (80, 100); said motor driver comprising a primary motor controller (26, 126) operatively configured to control said primary winding in said normal operation mode; said motor driver comprising a secondary motor controller (28, 128) operatively configured to control at least one of said primary winding and/or said secondary winding in said secondary operation mode; a first power sensor configured to sense a fault in said primary power supply and communicating with said secondary motor controller; a second power sensor configured to sense a fault in said secondary power source and communicating with said secondary motor controller; a primary winding sensor (33A, 33B, 33C) configured to sense a fault in said primary winding and communicating with said secondary motor controller; a secondary winding sensor (34A, 34B, 34C) configured to sense a fault in said secondary winding and communicating with said secondary motor controller; said secondary motor controller configured to drive said motor to said safe position using said secondary winding in the event of a sensed fault in said primary winding; and said secondary motor controller configured to drive said motor to said safe position using said secondary power source in the event of a sensed fault in said primary power source.