Oki CX 1145 MFP Programming manual

User Management Guide
CX1145 MFP
59315901, Rev. 1.0

TRADEMARKS AND COPYRIGHT 1
TRADEMARKS AND COPYRIGHT
Trademarks
yThe official name of Windows 98 is Microsoft Windows 98 Operating System.
yThe official name of Windows Me is Microsoft Windows Me Operating System.
yThe official name of Windows NT is Microsoft Windows NT Operating System.
yThe official name of Windows 2000 is Microsoft Windows 2000 Operating System.
yThe official name of Windows XP is Microsoft Windows XP Operating System.
yThe official name of Windows Vista is Microsoft Windows Vista Operating System.
yThe official name of Windows Server 2003 is Microsoft Windows Server 2003 Operating
System.
yMicrosoft, Windows, Windows NT, and the brand names and product names of other
Microsoft products are trademarks of Microsoft Corporation in the US and other countries.
yApple, AppleTalk, Macintosh, Mac, TrueType, and LaserWriter are trademarks of Apple Inc.
in the US and other countries.
yPostScript is a trademark of Adobe Systems Incorporated.
yNetscape is a trademark of Netscape Communications Corporation.
yIBM, AT and AIX are trademarks of International Business Machines Corporation.
yNOVELL, NetWare, and NDS are trademarks of Novell, Inc.
yOther company names and product names in this manual are the trademarks of their respec-
tive companies.

2 Preface
Preface
Thank you for purchasing OKI Multifunctional Digital Systems. This User Management Guide
explains the instructions how to manage the equipment with user management functions, such
as department management, User Management Setting, and User Authentication for Scan to E-
mail.
About This Guide
This manual explains describes how to manage this equipment using the functions of “Depart-
ment Management”, “User Management Setting” and “User Authentication for Scan to E-mail”.
Conventions
yThe term “this equipment” in this manual refers to the OKI Multifunctional Digital Systems.
yThe term “e-Filing” in this manual is an abbreviation of “electronic filing”.
Precautions in this manual
To ensure correct and safe use of this equipment, this operator’s manual describes safety pre-
cautions according to the three levels shown below.
You should fully understand the meaning and importance of these items before reading this
manual.
Other than the above, this manual also describes information that may be useful for the opera-
tion of this equipment with the following signage:
Indicates a potentially hazardous situation which, if not avoided, could result
in death, serious injury, or serious damage, or fire in the equipment or sur-
rounding assets.
Indicates a potentially hazardous situation which, if not avoided, may result in
minor or moderate injury, partial damage of the equipment or surrounding
assets, or loss of data.
Indicates a procedure you should follow to ensure the optimal performance of
the equipment and problem-free copying.
Describes handy information that is useful to know when operating the equip-
ment.
Pages describing items related to what you are currently doing. See these
pages as required.

TABLE OF CONTENTS 3
TABLE OF CONTENTS
TRADEMARKS AND COPYRIGHT...............................................................1
Preface...........................................................................................................2
About This Guide.......................................................................................2
Conventions .........................................................................................2
Precautions in this manual ........................................................................ 2
Chapter 1 Setting up User Management
Enabling Department Management ............................................................6
Setting up User Management Setting......................................................... 8
Enabling User Management Setting..........................................................9
Enabling Windows Domain Authentication.........................................10
Enabling LDAP Authentication ...........................................................15
Enabling MFP Local Authentication ...................................................20
Managing User Information .....................................................................22
How to Login to Touch Panel ..................................................................40
Setting up User Authentication for Scan to E-mail .................................44

4 TABLE OF CONTENTS

1.Setting up User Management
In the User Management tab page, you can enable or disable the department management, configure the
User Management Setting, and configure the User Authentication for Scan to E-mail.
Enabling Department Management.........................................................................6
Setting up User Management Setting .....................................................................8
Enabling User Management Setting ...................................................................................................9
Managing User Information...............................................................................................................22
How to Login to Touch Panel ............................................................................................................40
Setting up User Authentication for Scan to E-mail..............................................44

1 Setting up User Management
6 Enabling Department Management
Enabling Department Management
The department management is disabled as the default setting. When you want to manage the
counters for every department, enable the department management. If the department manage-
ment is enabled, the department code input screen will be displayed in the Touch Panel Display
when you perform copying, scanning, faxing, and e-Filing box operations to manage the opera-
tions separately every department. The printing can be also managed using the department
code.
yTo enable the department management, at least one department code must be registered.
Before enabling the department management, register the department code that you require.
yWhen you want to enable the User Management Setting, you do not have to enable the
Department Management first. The Department Management will be automatically enable
when the User Management Setting is enabled. However, no department code has been
registered, you cannot enable the User Management Setting. In that case, please register
the department code before enabling the User Management Setting.
yEnabling or disabling the department management can be operated in the General sub-
menu page in the Setup menu page.
yEnabling or disabling the department management can be operated using the Control Panel.
For instructions using the Control Panel, see User Functions Guide.
Enabling the department management
1
Click the User Management tab and the Authentication menu.
yThe login page is displayed.
2
Enter the administrator password and click [Login].
yThe Authentication page is displayed.

Enabling Department Management 7
3
Click [Department Setting].
yThe Department Setting page opens.
4
Specify the following items and click [Finish].
yDepartment Code
Select whether the department management is enabled or disabled.
When the User Management Setting is enabled, the Department Code option cannot be
disabled.
yDepartment Code Enforcement
Select whether invalid jobs, which a department code is not specified or invalid
department code is specified, are printed or stored in the invalid job list when the
department code is enabled.
ON — Select this to not print the invalid jobs and store them in the invalid job list.
Print — Select this to print the invalid jobs.
Delete — Select this to delete the invalid jobs without storing them in the invalid job list.
yIf the Department Code Enforcement is set to ON and the SNMP communication is
enabled in the printer driver, the user will be prompted to enter the correct department
code if an invalid department code was entered in the printer driver.
yThe Department Code Enforcement setting is not applied when the User Manage-
ment Setting is enabled.

1 Setting up User Management
8 Setting up User Management Setting
Setting up User Management Setting
When the User Management Setting is enabled, users must enter the user name and password
before operating this equipment. Therefore, you can secure the equipment from the unexpected
users.
When the User Management Setting is enabled, the following functions will be available.
yThe counters for each user can be managed.
yThe limitations for each user can be set.
yUp to 10000 users can be registered.
yThe user name and password will be required to operate the [COPY], [SCAN], [e-FILING],
[FAX], [TEMPLATE], [USER FUNCTIONS], and [JOB STATUS] buttons.
yThe user name and password will be required to operate the e-Filing web utility.
yThe print jobs can be accepted only from the computer of which the login user name can be
attested. (When the Windows Domain Authentication or LDAP Authentication is used, the
computer must also join the domain.)
yWhen the Windows Domain or LDAP Authentication is used, the user information will be reg-
istered automatically in the equipment when a user enters the user name and password in
the User Authentication screen and then enter the department code.
The following table shows which function will use the User Management Setting.
Operation Authentication Remarks
Control Panel COPY Yes
SCAN Yes
e-FILING Yes
FAX Yes
EXTENSION No
JOB STATUS Yes
ACCESS No
INTERRUPT Yes
TEMPLATE Yes
USER FUNCTIONS Yes
Web TopAccess No
e-Filing Yes
Client Software Printer Driver
N/W-Fax Driver
Yes
(User Name Only)
The computer must
login the domain.
File Downloader No
TWAIN Driver No
Backup/Restore No
AddressBook Viewer No
Remote Scan No

Setting up User Management Setting 9
Please remember the following limitations and considerations for the User Management Setting.
- The jobs cannot be printed or deleted from TopAccess. When you want to print or delete the
jobs, please perform the operation from the [JOB STATUS] button on the Control Panel.
- When the Windows Domain or LDAP Authentication is enabled, the password setting in the
User Information will not be used for the authentication. Do not specify the password for the
User Information when the Windows Domain or LDAP Authentication is used.
- When the user’s jobs are in progress or the user currently log in the touch panel, the user
information cannot be deleted or you cannot reset the user’s counters.
- The print jobs sent from Mac OS X 10.3.x or earlier are processed as invalid jobs depending
on the Department Code Enforcement setting. When the printing is performed on Mac OS X
10.3.x to 10.4.x, the printing job is displayed with a user name "OSX User" on the Touch
Panel Display of the equipment.
Before registering the user information, enable the User Management Setting.
P.9 “Enabling User Management Setting”
After you enable the User Management Setting, register the user information.
P.22 “Managing User Information”
Enabling User Management Setting
This equipment supports the following methods for the User Management Setting.
yWindows Domain Authentication
When your network manages the network users using the Windows Domain, this equipment
can be managed using the Windows Domain Authentication.
When this is configured, users must enter the user name and password that is registered in
the Windows Domain to perform any operations on the Control Panel of this equipment.
P.10 “Enabling Windows Domain Authentication”
yLDAP Authentication
When your network manages the network users using the LDAP, this equipment can be
managed using the LDAP Authentication.
When this is configured, users must enter the user name and password that is registered in
the LDAP server to perform any operations on the Control Panel of this equipment.
P.15 “Enabling LDAP Authentication”
yMFP Local Authentication
When you do not have any network authentication systems in your network, you can use the
MFP Local Authentication.
When this is configured, users must enter the user name and password that is registered in
the MFP to perform any operations on the Control Panel of this equipment.
P.20 “Enabling MFP Local Authentication”
If you want to change the authentication method, please change the domain name and pass-
word settings of the User Information as required. It’s easy to change the settings of the User
Information using the Export/Import function.
P.31 “Exporting User Information and Counters”
P.34 “Importing User Information”

1 Setting up User Management
10 Setting up User Management Setting
Enabling Windows Domain Authentication
To use the Windows Domain Authentication, you must have Windows Domain Authentication
system in your network.
When the Windows Domain Authentication is enabled, the SNMP Communication must be
enabled for printing.
Enabling Windows Domain Authentication
1
Click the User Management tab and the Authentication menu.
yThe login page is displayed.
2
Enter the administrator password and click [Login].
yThe Authentication page is displayed.
3
Click [User Management Setting].
yThe User Management Setting page opens.

Setting up User Management Setting 11
4
Select “Windows Domain Authentication”.
yThe confirmation dialog box appears.
You can disable the User Management Setting by selecting “Disable” and click [Next].
5
Click [OK].
6
Select how to process a print job whose user authentication has
failed in the User Authentication Enforcement drop down box, and
then click [Next].
yIn the “User Authentication Enforcement” drop down box, select whether invalid jobs,
which an authentication failed, are printed or stored in the invalid job list.
-ON — Select this to not print the invalid jobs and store them in the invalid job list.
-Print — Select this to print the invalid jobs.
-Delete — Select this to delete the invalid jobs without storing them in the invalid
job list.
yIf you want to automatically register user information that is entered by users in the
authentication screen on the touch panel, TopAccess, and e-Filing web utility, check
the “Create User Information Automatically” check box.
yIf you want to gest user operations, check the “Enable Guest User” check box.

1 Setting up User Management
12 Setting up User Management Setting
7
Enter domain names for the network in the Domain Name 1, Domain
Name 2 and Domain Name 3 fields, and then click [Detail Setting].
You can specify up to 3 domain names. You must specify at least one domain name to
enable the Windows Domain Authentication.
8
Click [NT Domain], and Enter the following items. Then click [Next].
Domain Name — The domain name entered in Step 7 is displayed.
PDC — Enter the server name or IP address of the Primary Domain Controller.
BDC — Enter the server name or IP address of the Backup Domain Controller as you
required.
If the wrong primary or backup domain controller is specified, the [ENTER] button in the
USER AUTHENTICATION screen on the touch panel is highlighted while this equipment
searches for the primary or backup domain controller for 2 to 4 minutes. In that case,
correct the primary or backup domain controller setting after the beep will sound and the
alert message will be displayed on the touch panel.

Setting up User Management Setting 13
9
Specify the following items and click [Next].
Role Based Access — Select whether the Role Based Access Control is enabled or not.
LDAP Server — Select the LDAP server that manages the Role Based Access Control.
yWhen you enable Role Based Access Control, you must export the role based data
setting file embedded in this equipment or another equipment of the OKI 1100 series
MFP. Then edit this file into a form that required for LDAP server setting and import it
into the equipment.
yThe LDAP server to be used for the authentication must be configured in the Direc-
tory Service submenu page in the Maintenance menu. When you configure the
Active Directory in Windows server, please specify the domain administrator or
account operator for the user name.
yIf you checked the “Enable Guest User” checkbox in Step 6, the Guest ACL Settings
page is displayed. Go to the next step. If you did not check it, go to Step 11.
10
Enter the following items and click [Next].
Enable Copy — Check this to enable copying.
Enable Email — Check this to enable Emailing.
Enable File Share — Check this to enable the file saving operation
Enable Internet Fax — Check this to enable the Internet Fax function.
Enable Print — Check this to enable printing.
Enable e-Filing Box — Check this to enable the e-Filing function.
Enable Fax — Check this to enable the Fax function.
Enable Color Print — Check this to enable color printing.

1 Setting up User Management
14 Setting up User Management Setting
11
Specify how the From Address is set for Scan to Email.
When the User Authentication for Scan to Email is not enabled, these settings are not
used for Scan to Email.
Setting Address is 'User Name + @ + Mail Domain Name' — Select this to set the
From Address as “User Name@Mail Domain Name”, whose “User Name” is the user
name that is entered on the Touch Panel Display for the authentication, and “Mail
Domain Name” is the domain name that is entered in the “Mail Domain Name” field.
When this is selected, enter the domain name in the “Mail Domain Name” field.
Setting Address is searching from 'User Name' of LDAP — Select this to set the
From Address as the email address that is searched from the LDAP server.
When this is selected, this equipment will search the user name, which is entered on the
Touch Panel Display for the authentication, from the records of the attribute type in the
LDAP server that you specify in the “LDAP Server” drop down box and “Attribute type of
‘User Name’” field.
If the user name is found, this equipment sets the From Address as the email address of
the user name registered in the LDAP server.
If the user name is not found in the LDAP server, this equipment sets the From Address
as the “User Name@Mail Domain Name”, whose “User Name” is the user name that is
entered on the Touch Panel Display for the authentication, and “Mail Domain Name” is
the domain name that is entered in the “Mail Domain Name” field.
When this is selected, select the LDAP server in the “LDAP Server” drop down box, enter
the attribute type to search the user name in the “Attribute type of ‘User Name’” field, and
the domain name that is used when the user name is not found in the “Mail Domain
Name” field.
From Address is acquired from Email setting — Select this to set the From Address
as the email address set in the Email setting.
From Address cannot be edited in Scan to Email — Check this box if you do not want
to allow users to edit the From Address.
12
Click [Finish].
yThe Windows Domain Authentication is enabled.

Setting up User Management Setting 15
Enabling LDAP Authentication
To enable the LDAP Authentication, you must have LDAP directory service in your network.
yBefore enabling the LDAP Authentication, please see “Setting up LDAP Authentication Ser-
vice” in the Network Administration Guide.
yTo enable LDAP with SSL, please see the description for LDAP Session in TopAccess
Guide.
Enabling LDAP Authentication
1
Click the User Management tab and the Authentication menu.
yThe login page is displayed.
2
Enter the administrator password and click [Login].
yThe Authentication page is displayed.
3
Click [User Management Setting].
yThe User Management Setting page opens.

1 Setting up User Management
16 Setting up User Management Setting
4
Select “LDAP Authentication”.
yThe confirmation dialog box appears.
You can disable the User Management Setting by selecting “Disable” and click [Next].
5
Click [OK].
6
Select how to process a print job whose user authentication has
failed in the User Authentication Enforcement drop down box, and
then click [Next].
yIn the “User Authentication Enforcement” drop down box, select whether invalid jobs,
which an authentication failed, are printed or stored in the invalid job list.
-ON — Select this to not print the invalid jobs and store them in the invalid job list.
-Print — Select this to print the invalid jobs.
-Delete — Select this to delete the invalid jobs without storing them in the invalid
job list.
yIf you want to automatically register user information that is entered by users in the
authentication screen on the touch panel, TopAccess, and e-Filing web utility, check
the “Create User Information Automatically” check box.
yIf you want to enable the gest user operations, check the “Enable Guest User” check
box.

Setting up User Management Setting 17
7
Select the LDAP server to be used for the authentication and select
the type of the LDAP server. Then click [Detail Setting].
Windows Server — Select this when LDAP is running on Windows server.
LDAP Server (Other than Windows Server) — Select this when the LDAP is running
the server other than Windows server. When this is selected, you have to specify the
attribute type of ‘User Name’.
The LDAP server to be used for the authentication must be configured in the Directory
Service submenu page in the Maintenance menu.
8
Specify the following items and click [Next].
Role Based Access — Select whether the Role Based Access Control is enabled or not.
LDAP Server — Select the LDAP server that manages the Role Based Access Control.
yWhen you enable Role Based Access Control, you must export the role based data
setting file embedded in this equipment or another equipment of the OKI 1100 series
MFP. Then edit this file into a form that required for LDAP server setting and import it
into the equipment.
yThe LDAP server to be used for the authentication must be configured in the Direc-
tory Service submenu page in the Maintenance menu. When you configure the
Active Directory in Windows server, please specify the domain administrator or
account operator for the user name.
yIf you checked the “Enable Guest User” checkbox in Step 6, the Guest ACL Settings
page is displayed. Go to the next step. If you did not check it, go to Step 10.

1 Setting up User Management
18 Setting up User Management Setting
9
Enter the following items and click [Next].
Enable Copy — Check this to enable copying.
Enable Email — Check this to enable Emailing.
Enable File Share — Check this to enable the file saving operation
Enable Internet Fax — Check this to enable the Internet Fax function.
Enable Print — Check this to enable printing.
Enable e-Filing Box — Check this to enable the e-Filing function.
Enable Fax — Check this to enable the Fax function.
Enable Color Print — Check this to enable color printing.

Setting up User Management Setting 19
10
Specify how the From Address is set for Scan to Email.
When the User Authentication for Scan to Email is not enabled, these settings are not
used for Scan to Email.
Setting Address is 'User Name + @ + Mail Domain Name' — Select this to set the
From Address as “User Name@Mail Domain Name”, whose “User Name” is the user
name that is entered on the Touch Panel Display for the authentication, and “Mail
Domain Name” is the domain name that is entered in the “Mail Domain Name” field.
When this is selected, enter the domain name in the “Mail Domain Name” field.
Setting Address is searching from 'User Name' of LDAP — Select this to set the
From Address as the email address that is searched from the LDAP server.
When this is selected, this equipment will search the user name, which is entered on the
Touch Panel Display for the authentication, from the records of the attribute type in the
LDAP server that you specify in the “LDAP Server” drop down box and “Attribute type of
‘User Name’” field.
If the user name is found, this equipment sets the From Address as the email address of
the user name registered in the LDAP server.
If the user name is not found in the LDAP server, this equipment sets the From Address
as the “User Name@Mail Domain Name”, whose “User Name” is the user name that is
entered on the Touch Panel Display for the authentication, and “Mail Domain Name” is
the domain name that is entered in the “Mail Domain Name” field.
When this is selected, select the LDAP server in the “LDAP Server” drop down box, enter
the attribute type to search the user name in the “Attribute type of ‘User Name’” field, and
the domain name that is used when the user name is not found in the “Mail Domain
Name” field.
From Address is acquired from Email setting — Select this to set the From Address
as the email address set in the Email setting.
From Address cannot be edited in Scan to Email — Check this box if you do not want
to allow users to edit the From Address.
11
Click [Finish].
yThe LDAP Authentication is enabled.