Trying to make a very specific configuration for a client. Any advice would be great

[JasonSBE]

So I have a government entity that wants to have the following configuration:

Any user can walk up to the machine and print/scan/copy/fax. No restrictions on quantity or anything. No one can walk up to the machine and modify the address book.

Only the person in charge of all the mfp's will have access to the administrator console

All of their I.T. staff will have access to make changes to the address book with a simple login.

My first instinct was to turn on user authentication with public user access, then create a username and password that only the I.T. staff has access to. The issue I'm running in to is that in order to give that I.T. login access to modify the address book after I turn that feature off, the I.T. account will also have access to all other settings that the administrator console has available. Is there a different approach that I should be using, or is this simply not possible?

[mrwho]

Seems to me you only need to enable administrator login on the machine.

EDIT: Sorry, I was thinking this was a Ricoh issue - don't know if it's that simple on KM machines.

[Synthohol]

i seem to remember you can filter IPs by port# you can block port 80 and 8080 access for the whole subnet.
also you can turn off PSWC in admin mode.

[emujo2]

You can remove the ability for a user to type an address to send to, limiting them to what is already in the AB, and you can remove the AB from the user utility tree, but you can't assign a sep password for admin and address book.

[rrrohan]

If you setup user authentication to authenticate to external server and set it to your AD you could lock down the address book to show nothing but the Scan to Me button.

users can just scan to themself and forward on if needed from PC

[kingarthur]

I can't remember how, but I'm sure you can lock the "Utility" section with a password, and then have a separate password for "Administrator setting" - . remove address book from the front screen - so they can only access it via "Scans" .

[kingarthur]

Found it - but it looks like it's the "User settings" you can lock - change softswitch 71 to HEX 08 - but you have to use the admin password - sorry to get your hopes up

[copier tech]

So I have a government entity that wants to have the following configuration:

Any user can walk up to the machine and print/scan/copy/fax. No restrictions on quantity or anything. No one can walk up to the machine and modify the address book.

Only the person in charge of all the mfp's will have access to the administrator console

All of their I.T. staff will have access to make changes to the address book with a simple login.

My first instinct was to turn on user authentication with public user access, then create a username and password that only the I.T. staff has access to. The issue I'm running in to is that in order to give that I.T. login access to modify the address book after I turn that feature off, the I.T. account will also have access to all other settings that the administrator console has available. Is there a different approach that I should be using, or is this simply not possible?

I have a few clients that want something similar. I simply lock down the utility key with SW 200 HEX 20. Then to access the utility key just enter the default admin password 1234567812345678