Ricoh Aficio MP C5502 User Guide - Page 488

2. Configuring User Authentication • During Windows Authentication, data registered in the directory server, such as the user's e-mail address, is automatically registered in the machine. If user information on the server is changed, information registered in the machine may be overwritten when authentication is performed. • Users managed in other domains are subject to user authentication, but they cannot obtain items such as e-mail addresses. • If Kerberos authentication and SSL encryption are set at the same time, e-mail addresses cannot be obtained. • If you created a new user in the domain controller and selected "User must change password at next logon" at password configuration, first log on to the computer and change the password. • If the authenticating server only supports NTLM when Kerberos authentication is selected on the machine, the authenticating method will automatically switch to NTLM. • For the characters that can be used for login user names and passwords, see p.21 "Usable characters for user names and passwords". • The first time you access the machine, you can use the functions available to your group. If you are not registered in a group, you can use the functions available under "*Default Group". To limit which functions are available to which users, first make settings in advance in the Address Book. • When accessing the machine subsequently, you can use all the functions available to your group and to you as an individual user. • Users who are registered in multiple groups can use all the functions available to those groups. • If the "Guest" account on the Windows server is enabled, even users not registered in the domain controller can be authenticated. When this account is enabled, users are registered in the Address Book and can use the functions available under "*Default Group". • Under Windows Authentication, you can select whether or not to use secure sockets layer (SSL) authentication. • To automatically register user information such as fax numbers and e-mail addresses under Windows authentication, it is recommended that communication between the machine and domain controller be encrypted using SSL. To do this, you must create a server certificate for the domain controller. For details about creating a server certificate, see p.50 "Creating the Server Certificate". • Under Windows Authentication, you do not have to create a server certificate unless you want to automatically register user information such as fax numbers and e-mail addresses using SSL. • If you fail in obtaining fax information during authentication, see p.51 "If the Fax Number Cannot be Obtained". 44