SBS 2008 Multifunction printer - Scan to folders

One of the many issues that we see is that some large multifunction printer/photocopiers that have scan to folder functions are blocked by the Windows Server 2008/2003 settings.

Here are some of the fixes:

* Disable SMB Signing (this may not have been absolutely necessary)
* Change the username to "scanner@domain.local"
* Change the SMB path to "\\server.domain.local\scans"

Disable the SMB Signing

This can be completed via the registry or via group policy - please note only users who are familiar with either of these should attempt this. You can damage your systems if you're not careful.

Registry:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parameters\Enablesecuritysignature = 0

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanmanserver\Parameters\Requiresecuritysignature = 0

Group Policy:

Please note that SMB signing is a security feature and that by disabling it you open the door to certain security risks. This action should be taken only when absolutely necessary.

Instead of making changes to the Default Domain Policy to disable SMB signing, create a new Group Policy Object with the appropriate policy settings. This is in line with the additional Group Policy Objects created by the Small Business Server setup.

1. At the server, open the Server Management console.

    

2. Expand Advanced Management.
3. Expand Group Policy Management.
4. Expand the forest.
5. Expand Domains.
6. Select the local domain. The SBS policy objects will display in the right-hand pane along with the Default Domain Policy.
7. Right-click the domain icon (domainname.local) in the console tree and select Create and Link a GPO Here.
8. Enter “SMB Signing Disabled” (without the quotations marks) for the GPO Name and click OK.
9. Right-click on the new GPO in the right-hand pane and select Edit to open the Group Policy Object Editor.
10. Under Computer Configuration, expand Windows Settings.
11. Expand Security Settings.
12. Expand Local Policies.
13. Select Security Options.
14. In the right-hand pane, scroll down to Microsoft network server: Digitally sign communications (always) and double-click on the policy object.
15. Select the Disabled radio button and make sure the checkbox is enabled for Define this policy setting.
16. Click OK.
17. Close the Group Policy Object Editor.
18. Right-click on the SMB Signing Disabled policy object and select Enforced. In the Linked Group Policy Objects window, the SMB Signing Disabled object should show Yes under both Enforced and Link Enabled.
19. Move the SMB Signing Disabled policy just above the Default Domain Policy in the window. The SMB Signing Disabled policy object should be number 5 in the list and the Default Domain Policy should be number 6 for a default SBS installation.
20. Open a command prompt window on the server.
21. Type “gpupdate /force” (without the quotation marks) and press Enter.
22. When the policy update completes, close the command prompt window.

This should work with most manufacturers of printers that use SMB to scan