Ricoh Aficio MP C3002, User Manual

Page: 488 / 830

• During Windows Authentication, data registered in the directory server, such as the user's e-mail
address, is automatically registered in the machine. If user information on the server is changed,
information registered in the machine may be overwritten when authentication is performed.
• Users managed in other domains are subject to user authentication, but they cannot obtain items
such as e-mail addresses.
• If Kerberos authentication and SSL encryption are set at the same time, e-mail addresses cannot be
obtained.
• If you created a new user in the domain controller and selected "User must change password at
next logon" at password configuration, first log on to the computer and change the password.
• If the authenticating server only supports NTLM when Kerberos authentication is selected on the
machine, the authenticating method will automatically switch to NTLM.
• For the characters that can be used for login user names and passwords, see p.21 "Usable
characters for user names and passwords".
• The first time you access the machine, you can use the functions available to your group. If you are
not registered in a group, you can use the functions available under "*Default Group". To limit
which functions are available to which users, first make settings in advance in the Address Book.
• When accessing the machine subsequently, you can use all the functions available to your group
and to you as an individual user.
• Users who are registered in multiple groups can use all the functions available to those groups.
• If the "Guest" account on the Windows server is enabled, even users not registered in the domain
controller can be authenticated. When this account is enabled, users are registered in the Address
Book and can use the functions available under "*Default Group".
• Under Windows Authentication, you can select whether or not to use secure sockets layer (SSL)
authentication.
• To automatically register user information such as fax numbers and e-mail addresses under
Windows authentication, it is recommended that communication between the machine and domain
controller be encrypted using SSL. To do this, you must create a server certificate for the domain
controller. For details about creating a server certificate, see p.50 "Creating the Server
Certificate".
• Under Windows Authentication, you do not have to create a server certificate unless you want to
automatically register user information such as fax numbers and e-mail addresses using SSL.
• If you fail in obtaining fax information during authentication, see p.51 "If the Fax Number Cannot
be Obtained".
2. Configuring User Authentication
44