Specifying Windows Authentication

Open a web browser from a networked computer, and then log in to Web Image Monitor as the machine administrator.

For details on how to log in, see Administrator Login Method.

Point to [Device Management], and then click [Configuration].

Click [User Authentication Management] under "Device Settings".

Select [Windows Authentication] in the "User Authentication Management" drop-down list box.

Select the "Printer Job Authentication" level.

For details about of the printer job authentication levels, see Printer Job Authentication.

If you select [Entire] or [Simple (All)], proceed to Step 7.

If you select [Simple (Limitation)], proceed to Step 6.

Specify the range in which [Simple (Limitation)] is applied to "Printer Job Authentication".

You can specify the IP address range to which this setting is applied. Also, you can specify whether or not to apply the setting to the parallel and USB interfaces.

If you want to use Kerberos authentication, click [On] under “Kerberos Authentication”.

If you want to use NTLM authentication, click [Off] and proceed to Step 9.

Select Kerberos authentication realm under “Realm Name”.

To enable Kerberos authentication, a realm must be registered beforehand. The realm name must be registered using uppercase letters. For details about registering a realm, see Web Image Monitor Help.

Up to five realms can be registered and selected.

Enter the name of the domain controller to be authenticated in the “Domain Name” box.

When you specify the domain name in the Fully Qualified Domain Name format, enter “. ” at the end of the character string.

In addition, depending on your environment, you can enter the group name in the blank area of the "Group Settings for Windows Authentication" box, and then specify the printer functions available.

Click [On] for "SSL".

If you are not using SSL for authentication, click [Off].

If you have not registered a global group, proceed to Step 13.

If you have registered a global group, proceed to Step 11.

If global groups have been registered under Windows server, you can limit the use of functions for each global group.

You need to create global groups in the Windows server in advance and register in each group the users to be authenticated.

You also need to register in the machine the functions available to the global group members.

Create global groups in the machine by entering the names of the global groups registered to the Windows Server. (Keep in mind that group names are case sensitive.) Then, specify the printer functions available to each group.

If global groups are not specified, users can use the available functions specified in "*Default Group".

If global groups are specified, users not registered to global groups can use the available functions specified in "*Default Group". By default, all functions are available to "*Default Group" members.

Specify the limitation on available functions according to user needs.

Enter the group name in the blank area of the "Group Settings for Windows Authentication".

In "Available Functions", select the machine's functions you want to permit.

Windows Authentication will be applied to the selected functions.

Users can use the selected functions only.

For details about specifying available functions for individuals or groups, see Limiting Available Functions.

Click [OK].

Log out.

For details about logging out, see Administrator Logout Method.