Ricoh MP C2003 Series User Manual page 324

2. Configuring User Authentication
• Windows Server 2003/2003 R2
• Windows Server 2008/2008 R2
• Windows Server 2012
To use Kerberos authentication under Windows Server 2008, Service Pack 2 or later must be
installed.
• Transmission between the machine and the KDC server is encrypted if Kerberos authentication
is enabled. For details about specifying encrypted transmission, see page 175 "Kerberos
Authentication Encryption Setting".
• During Windows Authentication, data registered in the directory server, such as the user's e-mail
address, is automatically registered in the machine. If user information on the server is changed,
information registered in the machine may be overwritten when authentication is performed.
• Users managed in other domains are subject to user authentication, but they cannot obtain items
such as e-mail addresses.
• If Kerberos authentication and SSL encryption are set at the same time, e-mail addresses cannot be
obtained.
• If you created a new user in the domain controller and selected "User must change password at
next logon" at password configuration, first log on to the computer and change the password.
• If the authenticating server only supports NTLM when Kerberos authentication is selected on the
machine, the authenticating method will automatically switch to NTLM.
• When using Windows authentication, the login name is case sensitive. If you make a mistake, the
user's login name will be added to the address book. You should delete the added user.
• If the "Guest" account on the Windows server is enabled, even users not registered in the domain
controller can be authenticated. When this account is enabled, users are registered in the Address
Book and can use the functions available under "*Default Group".
• For the characters that can be used for login user names and passwords, see page 21 "Usable
characters for user names and passwords".
• When accessing the machine subsequently, you can use all the functions available to your group
and to you as an individual user.
• Users who are registered in multiple groups can use all the functions available to those groups.
• Under Windows Authentication, you do not have to create a server certificate unless you want to
automatically register user information such as fax numbers and e-mail addresses using SSL.
• If you fail in obtaining fax information during authentication, see page 51 "If the Fax Number
Cannot be Obtained".
44