Bizhub 350 - unable to scan to network folder

[grupy]

We replaced our older copiers with the Bizhub 350 and I've been unable to configure the device to successfully scan to a network folder.

I have created an account within AD and set the permission to never change password. I have connected to the copiers web interface and configured a button to Scan PDF. This button is set to the IP address of the server where the folder is stored and the network folder is also configured, along with the account that I created earlier. I am using the TX:PC (SMB) option and for one reason or another am unable to scan to the desired folder. I have left the coding method to MH.

I have even tried to send a PDF file to my PC directly as well without any success. I used my IP address and created a new folder called "scan", which I shared out to all users (with full access) and still am unable to recieve any kind of document. So, scanning over the network to my PC doesnt work either nor does it work for the file server.

Am I missing something in particular here? Any suggestions into a fix would be greatly appreciated.

[discontained]

are you trying to set it up onto a server where everyone can access the shared folder on the server, or a individual workstation?

[grupy]

are you trying to set it up onto a server where everyone can access the shared folder on the server, or a individual workstation?

In the end, I need to configure it to a server where everyone has access to it. The network folder is a shared folder, and everyone has full control over each of the folders that reside in that location.

The account that was created for the server access, has full rights and the password is set not to change either - I know a bad security risk but the account only has access to this one share drive.

As for the individual workstation, this was just a simple test to get it working for testing purposes.

[discontained]

I just setup a client with scan to desktop, make sure the server login and the password is setup on the copier itself.

Also you want to edit the server's network IP (start>run>cmd... ipconfig and whatever the ip for the server is you want to enter that into the host IP address... Than you want to point to the folder loctaion
make sure your folder on the Server Desktop or whever it is, is setup shared.

EX. D:\Shared Docs\Scans

you want to edit the scan directory on the copier itself either thru pagescope or via one touch registration entry on the copier to say "D:\Shared Docs\Scans" you should than be able to see the scan show up in the folder


Hope that helps

[grupy]

I have set our test account, lets call it ScanUser, will full access to a network folder on our local P: drive. The P: drive is public for all users in my office, and in there I have created a folder called Scans.

I have used PageScope to configure the one-touch button on my 350 and the settings are as follows:

TX:PC (SMB) - this is set as the Com. Mode

IP Address: 1.2.3.4 (I have entered the IP address of our server)
File Path: Parent\Child\Scan (this is actually P:\Parent\Child\Scan on our network)
UserName: ScanUser (this is the network account created for this only)
Password: ***** (entered in the AD password for this account)
Retype Password: ***** (re-entered in AD password)
File Type: PDF
Coding Method: MH

I get the following error message: ED09C7
This error indicates that the username/password is incorrect.

Does the user account ScanUser need more special priviledges, such as domain admin to store a file onto a shared folder that all users have full access to??

Thanks for your earlier reply.

[dallas]

Change the default domain security settings.

Open Server Management:
Default Domain Controller Policy -> Security Settings -> Local Policies -> Security Options

Change:
Mircosoft network server: Digitally sign communications (always) to "disabled"
Microsoft network server: Digitally sign communications (if client agrees) to "disabled"

[michael517mi]

Did you try "\Parent\Child\Scan"

with the backslash on the front as well?

[pepper38_cnd]

Try in the copier network settings under Wins enter the address of your server even if you are not running Wins on the server! I have found on 2003 server this helps when scanning to folder (SMB).

[johnj_01201]

[ivovb]

I would suggest to enter for file path ONLY the name of shared folder. In your example it is
Scan
Folder Scan must be shared! and your ScanUser must have full rights to this folder (permissions and security fields).

BR

[TheOwl]

This machine is NOT Active Directory compliant. Which means that you cannot scan to anything other than a local user account.

Konica Minolta are not going to fix this issue due to the ROM size being too small on the machine to add the coding to the firmware and the fact that the new range of B&W Bizhubs are being released which are AD compliant.

[johnj_01201]

Actually you can, and we do it at our own office with SBS 2003 R2. We have many customers doing it with this machine (200,250, and 350) on 2003 servers as well. It only has to pass the SMB authentication process. It doesn't use Active Directory in any real sence. To date, we only have 2 customers that cannot do this with their 2003 servers.

[TheOwl]

Konica Minolta's official statement is these machines are not capable of NTLM v2 which is required to use Active Directory. We recently got caught out on this one in a major tender where by the sales guys said yes when the official answer is no.

If you are using Server 2003 or other versions of server, you can create a local account, but this is impossible on a Domain Controller as the local accounts and groups are disabled when you install Active Directory.

The only way I can think of to get the machines to scan to file on a Domain Controller is to install IIS (or similar FTP program) and get the machine to scan scan via FTP instead of SMB.

By disabling 'SMB Packet Digital Signing' you are also creating a possible security risk. From memory, SBS 2003 and Server 2008 are the only versions with this group policy enabled by default.

[johnj_01201]

We're just talking about scanning to an SMB share, nothing more. It's a simple authentication process. Our salesmen tell the customers that it will scan to their desktops, but that it usually works on the server IF their IT is OK with the changes and wants to go threw with it. We give the info to their IT and their IT determine if they want to do it or not. The machine is also capable of using AD with LDAP, and AD is the default setting. The changes make the 2003 server the same as the default 2000 server settings.


Also, I see KM is now saying the newest copiers can scan to "SMB(Desktop)" in all the spec sheets.

Your also correct that the most of the other copiers do not need these changes. At one point KM had Windows signature capability, but I am told they had to backtrack, so I do not know which models will work out of the box with 2003\2008 server at this time.

[TheOwl]

Basically all the new machines with the Emperon technology can authenticate with AD.

The BH 250 / 350 is basically a Di 2510 / 3510 with a couple of differences made. The Australian release for the new series B&W machines (25 and 35 cpm) is set for late April. These are fully capable of NTLM v2 and AD authentication.

Scanning to a local desktop uses NTLM v1 because the user name and password are kept locally on that desktop, not with in the Active Directory. You can do this on a server, but only if it isn't a DC which will disable the local logon credentials.