Ricoh Aficio MP C3000 Security Guide - Page 51

Authentication and its Application Windows Authentication Specify this authentication when using the Windows domain controller to au- thenticate users who have their accounts on the directory server. Users cannot be authenticated if they do not have their accounts in the directory server. Under Windows authentication, you can specify the access limit for each group regis- 2 tered in the directory server. The address book stored in the directory server can be registered to the machine, enabling user authentication without first using the machine to register individual settings in the address book. If you can obtain user information, the sender's address (From:) is fixed to prevent unauthorized access when sending e-mails under the scanner function. Important ❒ During Windows Authentication, data registered in the directory server, such as the user's e-mail address, is automatically registered in the machine. If user information on the server is changed, information registered in the machine may be overwritten when authentication is performed. ❖ Operational Requirements for Windows Authentication • To specify Windows authentication, the following requirements must be met: • The Printer/Scanner unit must be installed. • A domain controller has been set up in a designated domain. • This function is supported by the operating systems listed below. NTLM authentication is used for Windows authentication. To obtain user information when running Active Directory, use LDAP. If SSL is being used, this requires a version of Windows that supports TLS v1, SSL v2, or SSL v3. • Windows NT 4.0 Server • Windows 2000 Server • Windows Server 2003 Limitation ❒ Users managed in other domains are subject to user authentication, but they cannot obtain items such as e-mail addresses. ❒ If you have created a new user in the domain controller and selected [User must change password at next logon], log on to the machine from the computer to change the password before logging on from the machine's control panel. Note ❒ The first time you access the machine, you can use the functions available to your group. If you are not registered in a group, you can use the functions available under [Default Group]. To limit which functions are available to which users, first make settings in advance in the address book. ❒ When accessing the machine subsequently, you can use all the functions available to your group and to you as an individual user. ❒ Enter the login password correctly, keeping in mind that it is case-sensitive. 42