Archives August 2013

Papercut

PaperCut Mobile Print Release & Find Me Printing

by Andy Norman

At the End of 2012 PaperCut released a new function that allows the user to print to a queue and then release their jobs from any mobile device that is connected to the local network via wifi. The user logs in via their phones web browser using their AD credentials and then you can choose from a list which printer you want to print your jobs.

In a standard print environment a user’s job prints immediately and may accidentally be collected by another user. Document security is an important requirement in the modern print environment. 

This problem is usually addressed with print release by implementing dedicated release stations, embedded MFD applications, or specialist hardware. PaperCut’s Mobile Print Release provides an alternate cost effective solution that leverages the powerful devices that exist in almost everyone’s pocket – the smart phone.

Features:

* Release held jobs from any print queue with Hold/Release enabled

* Works on all modern mobile phones

* Simple intuitive interface, optimized for touch screens

* Designed to work with most modern mobiles and tablet devices

* Quickly locate printers with keyword searching (location, name or code)

* Can be used in environments with Find Me Printing configured, giving the user ultimate control over where and when their jobs are released

* Support for QR code printer location/lookup

For more information about copier control, print management and PaperCut MF contact Elmdale Maintenance on 0118 982 1444

Original Video @ :  http://youtu.be/zrTlSiRw0ms

Olivetti MFP Tips

How to Configure An SMTP Relay in Exchange on SBS 2008 To Allow An MFP To Use Scan To Email

by Andy Norman

We occasionally have issues when setting up scan to email for clients where you get server connect errors, this is due to Exchange not allowing the MFP to relay through it. In most cases we have mentioned this to the companies IT representative and they have configured it for us.

Should the need arise I have found the following article from the Official SBS Blog: How to Configure Trusted SMTP Relay in Exchange on SBS 2008  just in case it is needed in the field.

There is also another article which I originally found at MPECS Inc. Blog where they configure it for use with a Konica Minolta bizhub machine which may be of use as well.  Or you can check out this post at Lyle Epstein’s Systems Engineer Blog which is also helpful.

How to Configure Trusted SMTP Relay in Exchange on latest windows servers SBS 2008 onwards

Today we will discuss the steps necessary to allow trusted internal servers and external authenticated users to relay email through your SBS 2008 server. You would do this for scenarios in which external POP3 or IMAP4 clients or an internal application server needs to send email through your Exchange server. This is not to be confused with external anonymous relay, where your server is open to any connecting IP address for abuse.

The key to making this secure is restricting access through either authentication or connection control (filtering by IP address). You will also see how SBS 2008 configures TLS in Exchange to encrypt your traffic to protect against eavesdropping.

Application Server Relay

SBS 2008 Setup creates a Default receive connector in Exchange to allow internal machines using Basic over TLS, Exchange Server, or Windows Integrated Authentication to relay. It listens on port 25 and allows connections from any IP address in the internal LAN. You may need to perform some extra configuration on your application servers to meet the authentication requirements of the connector.

You can tone down the security requirements in favor of an easier deployment by creating a new receive connector that allows anonymous relay, but only from specific IP addresses.

The Exchange blog already has a nice walkthrough on how to configure this. The requirements for SBS are no different. You can reach it through the following link: http://msexchangeteam.com/archive/2006/12/28/432013.aspx

External Client Relay

Exchange 2007 makes it easy to properly configure an external client receive connector. The first option you choose when creating a new connector is its intended use. When you select “client”, the connector is automatically configured with the proper port, authentication settings and permissions. All you need to choose is the name and remote IP ranges for the connector.

In the Exchange Management Console, expand Server Configuration > Hub Transport and under Actions choose New Receive Connector

clip_image002

On the introduction screen you choose the name and intended use. Choose Client

After this, you will select what remote IP address ranges that will be allowed to connect. The default includes all IPs.

clip_image004

At the completion screen, you can view the powershell command that has been applied behind the scenes:

New-ReceiveConnector –Name ‘Client’ –Usage ‘Client’ –RemoteIPRanges ‘0.0.0.0-255.255.255.255’ –Server ‘SERVER’

Now we can verify the network, authentication, and permission groups settings to see how a Client receive connector has been configured. If you go to the properties, you will see that it’s listening on port 587, that it has enabled Basic authentication over TLS, and that it is only allowing Exchange Users (Authenticated Users) to connect.

NOTE: Make sure that port 587 is open in your firewall

Further inspection of the AD permissions on the receive connector show that authenticated users have the ms-Exch-SMTP-Accept-Any-Recipient right. This is the relay permission and should never be owned by anonymous users. You can view this either through ADSIEDIT or by running the following powershell command:

Get-ADPermission “Client Receive Connector Name” | where {$_.ExtendedRights –match “ms-Exch-SMTP-Accept-Any-Recipient“} | fl

If you have successfully run the Internet Address Management Wizard from the SBS Console, then your Exchange certificate for TLS has already been installed and configured. You can verify this by running the Get-ExchangeCertificatecommandlet and find the certificate with your external DNS domain name. The certificate will have IPWS listed under Services, which stands for IMAP, POP, Web and SMTP respectively.

clip_image005

At this point, make sure that your Client receive connector is configured with the same FQDN that is listed in the subject of your Exchange certificate. This will be displayed in the banner:

clip_image007

Once all of this is done, you are ready to setup Outlook, Outlook Express, Windows Mail, etc. Important points here are:

  • The client machine must trust both the Exchange certificate and the Root CA in which it was created from. A good test is to open IE on the client and browse OWA to see if you get the certificate warning(s).
  • You must configure the mail client to connect on port 587 and to send the proper credentials for authentication.
  • The server requires a TLS connection, you must specify this in the mail client

 

Should you require any further info then contact Elmdale Maintenance on 0118 982 1444

Data Administrator

How To Import An Address Book In To An Olivetti MFP Using Data Administrator

by Andy Norman

Importing Addresses In To An Olivetti MF282plus or Similar Machine Via Data Administrator

In a different post I went through exporting the address book from an Olivetti colour MFP, now we want to import the same address book in to another machine. You can also use this same method to import addresses from a spreadsheet as long as you save it as a Tab delimited text file. I will go in to that in a different post, first we will import the addresses created from another similar device such as a Konica Minolta Colour Bizhub or Olivetti Colour MFP.

Before we start to import the address book that we exported in our previous post we may need to edit the text file to add the password for the SMB addresses as Data Administrator doesn’t save them when you export them.

If you open up Microsoft Excel or a similar spreadsheet application, then open the address book file. You will need to select all files to be able to do this. Then select Tab delimited, click next 2 more times.

choose delimiter type

Next find the column labelled SMB:Password and add the password next to any SMB addresses, once you have done this you can save and exit.

type in smb password

Now we have edited the text file we can import the data in to the machine via Data Administrator.

First you will need to connect to the device like in previous posts, then you need to expand the tree on the left hand side for the address book.

address book data admin

Next select File, import, import each data from the file.

import each data from the file

Browse through to the file you need, it should then ask you to choose what type of addresses you want to import, in this case I am doing Email & SMB.

select address type

Click Next then make sure that Tab Delimited is checked and click Next again.

Then click next until you get to the section where it asks you to match the fields on the right hand side with the columns on the left hand side. You will need to scroll through each column and match the correct fields, see below.

select columns

match up columns

Once you have matched the columns up with the fields click next. On the next screen of the wizard you will need to highlight all the adresses and click on select, make sure you don’t include the column headers as you won’t want to export that to your machines address book.

select addresses

Next click Import and the addresses will appear in Data Administrator, you will then need to highlight all the addresses and click edit on the right hand side. This so that we can select Edit Search Key and check the box marked Main. If we don’t do this the addresses will not appear on the Favourites tab on the front screen of the machine when you select scan.

edit search key

main column populated

The next step is to click export to the device and then click write, this will then push the data on to the MFP.

export to device

Once you have written the data to the machine It should look like this.

Address Book On MFP

If you should require any more assistance then please call Elmdale Maintenance on 0118 982 1444

 

Data Administrator

How To Export The Address Book From An Olivetti Colour MFP Using Data Administrator

by Andy Norman

Exporting The Address Book From An Olivetti Colour MFP Using Data Administrator

Exporting the address book from Konica Minolta based Olivetti MFPs is relatively easy using the Data Administrator tool provided with the machine, it can be found on the user disks. If you can’t find it or want the latest version you can download it from our support page just click on the driver downloads on the right hand side of the page. The go to the Data Administrator folder to download the latest version.

google drive - data administrator download

 

The first step to exporting the address book from your machine is to connect to the machine, if you are not sure how to do this then see our article on adding and accessing a machine via data administrator .

Once you are connected, expand the tree on the left hand side and select the address book.

Open Address Book Of Machine

Next you will need to click on File at the top, then export, then save as tab text type.

Save As Tab Text Type

I suggest you save the file somewhere on the desktop in its own folder so you can find it easily.

Save The File Some Where Safe

 

That’s it you have exported the address book, you can now import it in to another machine. I will cover that in another post as you need to edit the text file as the software does not export the password for SMB scanning.

For more information the please call Elmdale Maintenance on 0118 982 1444