Link to home
Start Free TrialLog in
Avatar of Mark Hynes
Mark HynesFlag for United States of America

asked on

Networking

I have a copier that can scan documents and write the file to a Shared folder.  It requires a account that has permissions to access the Network Share.  What type of account would I setup to get the copier access to write the file to that share ?  I believe the TP its using is SMB.  Can any help please, and tell me how to accomplish this.

Thank you in Advance.


Mark H.
ASKER CERTIFIED SOLUTION
Avatar of Darrell Porter
Darrell Porter
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Charles Hurst
Charles Hurst

Does the network share reside on a Windows Server within a Domain?

If so the user account will just be a Domain User in most circumstances. You can grant the user access to the folder (share and NTFS) and then populate the copier/scanner with those credentials.

If not a domain you can use local PC credentials to the same effect.
Check to see if the copier connection to the server requires SMBv1.  SMBv1 has been largely removed by Windows Updates.
Depending on the copier, this may be challenging.  As John mentioned, there can be issues when the copier only uses SMBv1.

In several instances, I found it easier to set up an FTP server on the server (I like Filezilla) and access it in that fashion.
Just a regular user account with read/write permissions solely to the required areas.
Just setup a domain account and authorize to the folder share. You then use that account on the scanner to send the files. Grant whatever user authority to the folder share you write to.
One additional thought ... I usually create an AD account named "Office Equipment" and tighten restrictions on it wherever possible (and make exceptions specific to this account). This way, if it is compromised (because it usually involves folder/file sharing rights *AND* an associated mailbox) ... I know where it is coming from immediately (i.e. a human is using a "non-human" account). In Exchange, I hide it from the Address Book, so people don't even know it exists other than it sends mail to them from a piece of equipment.

If you think there will be more, another approach would be to create an AD group named "Office Equipment" (and possibly a hidden Distribution List of the same name for Exchange / email security), make specific AD accounts for each device or for specific groupings of devices and follow the same approach above.
Mark H: Is this in a domain environment or not?  
The SMB1 issue is real and I'm not sure that all printer manufacturers have stayed up with the trend that well.  
How old is the printer?  
Does the manufacturer provide firmware updates?  
How old is the last firmware update?  
What is the printer model?
All of these are important one way or another in what you're trying to accomplish.

In the mean time:
I have a copier that can scan documents and write the file to a Shared folder.  It requires a account that has permissions to access the Network Share.  What type of account would I setup to get the copier access to write the file to that share ?  I believe the TP its using is SMB.  Can any help please, and tell me how to accomplish this.
When you say "what type of account would I set up?", that's a good question.  This is going to be in the printer firmware design and it would be good to know the choices you have available in order to understand the meaning of your question fully..  If all you can choose is "SMB" then that's not exactly a good sign.  But, if SMB2 or similar then maybe OK.
In a Windows context (I guess this is Windows ... is it?) it would not matter whether the "account type" would be Standard or Administrator and I doubt you'll find that choice/distinction.
You *do* have to have the "server" name (whether it's a Windows Server or just a workstation) - that is, the computername - or possibly the computer's IP address and the Share Name.
Then you might refer to \\computername\ShareName or \\computerIP address\ShareName.
And, on the computer where the share resides, you need to have sharing and security privileges that the printer will match.
The printer may give you a User and Password to fill in for that purpose.
I hope that's enough to get you going....