LDAP on Workcentre 5890

[Joe Arseneau]

One question raised by our IT Manager was whether or not we should use a domain controller admin account to importing contacts or can we just use any of the active directory accounts. 

If you setup the machine for LDAP then no contacts are imported at all, that would make the LDAP access pointless since it would be a local address book. The MFP can be provided an account to use on the LDAP server if it is just going to be used to look up email addresses, or it would use the logged in users account (If LDAP is being used for authentication as well)

Can the Xerox negatively effective the underlying network if we gave all users access? This is our preferred method (so that anyone can login, not just the admins), but is there a security risk if we give all users access to using the xerox ldap service configuration?

It really seems like yo u are thinking the MFP could be used as an attack vector or data retrieval mechanism, it can't, LDAP is used to look up email addresses, or authenticate a person to the MFP to make a copy/scan/print/fax.

[hrmcardle]

So I wanted to ask a quick question. We have a Xerox Workcentre 5890 for use in our enterprise and were wondering how the setup should be done for LDAP interfacing with active directory. 

One question raised by our IT Manager was whether or not we should use a domain controller admin account to importing contacts or can we just use any of the active directory accounts. 

Can the Xerox negatively effective the underlying network if we gave all users access? This is our preferred method (so that anyone can login, not just the admins), but is there a security risk if we give all users access to using the xerox ldap service configuration?

Thanks.