Installation manual

TECHNICAL TIP TT- 20352
25 OF 46
Example 2 – Using Attributes Common to all Users
The domain in this scenario (Sharpshow.com) uses a different Active Directory organizational structure
but it has the same requirements as the previous example. The domain administrator has created users
in organizational units based on user roles as well as departments.
The company wants to have all users log into MFP with their network credentials to restrict usage of the
MFP. Each user in the company has a department and job title assigned within active directory.
Currently, there are 3 departments (Advertising, Production and Temporary Workers) and 3 job titles
(Manger, Staff and Temporary). Department Managers are to have full and unrestricted access to all
features of the MFP. Staff members in the Advertising department will have full access to the features
of the MFP but color output for printing and copying will be limited. Staff members in the Production
department will be restricted to black and white printing and copying but can scan in color. For security
purposes, temporary workers are not allowed to use any functions of the MFP even though they have
network accounts.
In addition, some employees speak Russian and others speak Spanish as their first languages. The
company wants these employees to be able to see the MFP display instructions in their native
languages if they request it.
In this example, attributes common to all users are used as opposed to private attributes – that is,
attributes that describe things related to more than one user such as company name and location.
These attributes have an advantage in that multiple users can be selected in the Active Directory
Computer and User administrative tool and the same attribute values can be applied to all users in one
step. The disadvantage is often these attributes are filled in when user accounts are created. Careful
review of all user accounts will be required to ensure that empty attribute fields are available for all
users.
Follow the instructions in the example below to obtain the company’s goal.
1. Determine Active Directory User Attributes to use as field values.
NOTE: This step should be completed by the network administrator
In this example, the following common attributes were found to be unused on the General tab for all
users in the Active Directory structure of the company
Description:
Office:
Web page:
When a single user’s properties are displayed in the Windows Active Directory Computer and User
administrative tool, the General tab is displayed as shown below: