User Authentication Management (Windows Authentication)
Configuration > Device Settings >
User Authentication Management > User Authentication Management (Windows Authentication)
Use this page to make settings for Windows Authentication.
Note
- To use Windows Authentication, the device and domain controller must be connected to the same network.
Windows Authentication Settings
SSL
Select whether to apply SSL encryption to information entered for user authentication.
Note
- To apply SSL encryption, a device certificate must be installed in the device.
Kerberos Authentication
Select whether or not to apply Kerberos authentication.
If you select "On": in [Realm Name], specify the Kerberos Realm for user authentication.
If you select "Off": in [Domain Name], specify the domain name for user authentication.
Domain Name
Specify the target domain of User Authentication using either an FQDN (Fully Qualified Domain Name) or NetBIOS name.
Use up to 63 alphanumeric characters for an FQDN.
Use up to 15 characters for a NetBIOS name.
For example, to specify the domain name "aaa.bbb.com", enter "aaa.bbb.com" as the FQDN (no omission), or enter "aaa" as the NetBIOS name (up to the first dot).
Note
- The following characters cannot be used in NetBIOS names:
" * + , / : ; < > = ? [ \ ] | space - This item is available only if [Kerberos Authentication] is set to "Off".
Realm Name
Specify the Kerberos realm for user authentication.
Note
- The realm name must be preset on the [Configuration] - [Device Settings] - [Program/Change Realm] page.
- This setting is available only if [Kerberos Authentication] is set to "On".
Group Settings for Windows Authentication
For each group defined in the domain, specify the group name, and then select the functions that you want to allow to the group. Settings made for the group are applied to all users belonging to it. Up to ten groups can be registered.
Note
- Users not belonging to the registered groups cannot use the device.
Default Group (Group 1) Name
Displays the default group belonging to the domain specified in [Domain Name].
In [Available Functions], select the check boxes of the functions that you want to allow to users in the group.
Group 2 Name to Group 10 Name
Enter the name of the group defined with global scope in the domain specified in [Domain Name], using up to 64 characters.
Group names are case sensitive.
In [Available Functions] for each group, select the functions that you want to allow to users in the group.
Available Functions
Select the check boxes of the functions that you want to allow to the user.
Note
- When a user is first registered to a group, the following settings are displayed by default in [Available functions]:
Copier: Black & White
Select whether User Authentication is required for black and white copying.
Copier: Single Color
Select whether User Authentication is required for single color copying.
Copier: Two-color
Select whether User Authentication is required for two-color copying.
Copier: Full Color
Select whether User Authentication is required for full color copying.
Color Copy Mode Limitation: Limit to Auto Color Selection
Enable or disable limiting color copying automatically to "Auto Color Selection".
Color Copy Mode Limitation: Full Color / Auto Color Selection
Enable or disable limiting color copying automatically to "Full Color" or "Auto Color Selection".
Other Function(s): Document Server
Select whether User Authentication is required for Document Server operations.
Other Function(s): Scanner
Select whether User Authentication is required for scanner functions.
Buttons
[Refresh]
Click to update the currently displayed information.
Note
- Before making the settings, click [Refresh] to obtain the machine's current status.
[OK]
Click to apply the settings.
[Cancel]
Click to cancel the settings.