May 02, 2012
Symptom: Scan to shared network folder is configured but does not work.
These suggestions are for Windows environments, but may be somewhat helpful in troubleshooting Macintosh, Linux, and UNIX shared folders also.
1. Make sure that the MFP and the computer can communicate with each other by using the ping command. If pinging does not generate responses then the connection must be fixed first.
a. At the MFP control panel press System Settings and login as Admin (or Key Operator)
b. Press Network Settings
c. Scroll to the bottom
d. In the IPv4 address enter the IP address of the computer hosting the shared folder.
e. Press Enter
2. Test access to the shared folder from another computer.
a. Find a computer on the network that does not already connect to the share.
b. Click Start, and then click Run.
c. Type: \\computername\foldername
d. Press Enter.
e. If this works enter the exact same information into the MFP web page.
Example: For a computer named Dropbox and a shared folder named Scans, the path is: \\dropbox\Scans
3. Test access to the share using the IP address.
a. Find a computer on the network that does not already connect to the share.
b. Obtain the IP address of the computer sharing the folder.
c. Type: \\computer_IP_address\foldername
d. Press Enter
e. If this works enter the exact same information into the MFP web page.
Example: If the computer has IP address 192.168.1.100 and a shared folder named Scans, use: \\192.168.1.100\Scans
4. Passwords are case sensitive. If a password is used, make sure that the password is entered on the MFP in exactly the same way as it is on the computer.
5. Check to see if the computer sharing the folder is on a network domain. This will affect the way that the user name of the folder is entered. Without a domain the user name is entered by itself.
In a domain the user name is entered in combination with the name of the domain.
No Domain:
User = username
Password = password
Domain:
Domain name = test.com
Username = test\username
Password = password
6. Make sure that the user account being used to access the shared folder has permissions for full control.
a. Go to the computer that is sharing the folder.
b. Right click the folder and select Properties from the list.
c. Click on the Sharing tab and then the Permissions button. Make sure that the user has the box for Full Control checked under Allow.
d. Click the Security tab and make sure that the user has the box for Full Control Checked in the Allow column.
e. Test scanning to the shared folder.
7. If scanning to the shared folder still does not work, the customer’s network administrator should be contacted to test the setting with the Everyone group given Full Control permission temporarily. Remove the user and password from the MFP webpage. Test scanning. If scanning to the shared
folder works for the Everyone group, then this suggests that there is a problem with the user account. If it still does not work then the network traffic should be analyzed during a test scan to determine what communication is occurring between the MFP and the server.
Models: All Current MFPs
Symptom: Selected servers are not found message on MFP panel when scanning.
Cause: Disabled setting on computer network card.
Solution: Follow these steps to enable NetBIOS over TCP/IP.
1. On computer right click My Network Places.
2. Select Properties.
3. Right click Local Area Connection.
4. Select Properties.
5. Select Internet Protocol (TCP/IP).
6. Select Properties.
7. Select Advanced tab.
8. Select WINS tab.
9. Select Enable NetBIOS over TCP/IP.
Note: Windows 7 has additional security built in and you may need to make some changes. Please see the attached PDFs for screenshots (at bottom of page) in addition to the information below.
How do I set up Scan to Folder with SMB on a Windows 7 PC? (How do I allow communication with a specific IP address for Windows Firewall with Advanced Security?)
If you cannot send a file from your device using the Scan to Folder function, Windows Firewall may be blocking the communication. Allow communication with a specific IP address in the Windows Firewall settings, and then perform the scan again.
To allow communication with a specific IP address, follow these steps:
- On the taskbar, click [Start], and then click [Control Panel].
- Click [System and Security].
- Click [Windows Firewall].
- Click [Turn Windows Firewall on or off].
- Confirm that [Turn on Windows Firewall] is selected, and then click [OK].
- Click [System and Security].
- Click [Administrative Tools].
- Double-click [Windows Firewall with Advanced Security].
- Confirm the current profile.
The profile displayed as [*** Profile is Active] is the active protocol. (In the below example, the [Public Profile] is currently active.)
- Scroll down the screen to find the following 3 rules which apply to the profile you confirmed in step 9.
Double-click a rule.
As an example, here we will be opening [File and Printer Sharing (NB Session-In)].
| Rule Name | Port |
|---|
| File and Printer Sharing (NB Name-In) | UDP137 |
| File and Printer Sharing (NB Session-In) | TCP139 |
| File and Printer Sharing (SMB-In) | TCP445 |
- In the Properties screen, select the [Scope] tab, and then click the [Add] button in [Remote IP address].
- Enter the IP address of your device, and then click [OK].
Here, we have entered "192.168.1.100" as an example.
- Confirm that the IP address you entered is displayed, and then click [OK].
- Repeat steps 12 to 14 for [File and Printer Sharing (NB Name-In)] and [File and Printer Sharing (SMB-In)].
- Click the [Close] button.
- Click the [Close] button in the [Administrative Tools] screen.
- Click the [Close] button in the [System and Security] screen.
- The configuration is now complete.
Perform Scan to Folder (SMB) again to confirm you can now scan successfully.
Scan to SMB (Network Folder) on Windows 7 & Vista - Business, Enterprise & Ultimate Editions
This article refers to Business, Enterprise & Ultimate Editions of Windows 7 and Vista only.
There are 2 modifications that can be made to Window's security policies that will allow 'scan to SMB' to work.
Go to Control Panel -> Administrative Tools -> Local Security Policy.
In this window, go to Local Policies -> Security Options.
The two settings you want to change are:
- Network Security: Do not store LAN Manager hash value on next password change from "Enabled" to "Disabled"
- Network Security: LAN Manager authentication level from "Not Defined" to "Send LM & NTLM responses"
Once you have done this go to Control Panel -> User Accounts -> Change your password. You don't need to change your password so the New password can be the same as the Current Password but you do have to click on the Change password box at the bottom right of the window to make this work.
In the example below; the current password is 'admin' and the new password is 'admin'.
This should now allow you to scan to Network Folder.
Scan to SMB (Network Folder) on Windows 7 & Vista - Home Premium, Basic & Starter Editions
This article refers to Home Premium, Basic and Starter editions of Windows 7 and Vista only.
There are 2 modifications that can be made to Window's security policies that will allow 'scan to CIFS' to work.
As these versions of Windows 7 and Vista do not have the Local Security Policy snap-in available, it is necessary to edit the Registry to make the required changes. Please make sure before proceeding that you have a working restore point and all important data is backed up before making any registry changes.
Ensure you are logged in with Administrator privileges. Click the Start icon and in the search box, type Regedit and open the program that appears. If you are presented with a User Access Control dialogue box, please click Yes to continue.
Navigate to the following registry area: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
If the following values do not already exist you will have to create them. To do so, right-click on Lsa (on the left panel) and select New -> DWORD (32-bit) Value. Name them:
LmCompatibilityLevel
NoLmHash
Ensure that the above spelling and capitalisation is used.
Once created, we need to edit these settings. To do so, double click on them to bring up the edit box. Change the settings as follows:
LmCompatibilityLevel = 1
NoLmHash = 0
After changing these settings, close Regedit and restart the PC.
Once you have done this go to Control Panel -> User Accounts -> Change your password. You don't actually have to change your password so New password can be the same as Current Password but you do have to click on the Change password box at the bottom right of the window to make this work.
Unable to scan to SMB (Network Folder)
Client: Windows 7 or Windows Vista. Domain: Windows 2008 or 2008 R2
This article assumes that you have already followed the steps in the above articles, where applicable:
When you join a domain running server 2008 or later using one of the above client operating systems, the firewall settings on the client machine will change in line with the domain policy. Specifically, their behavior towards shared folders will change.
If you have already set up the shared folder before joining the domain, the firewall will not allow the necessary SMB packets which enable you to scan to SMB.
However, if you set up the shared folder AFTER joining the domain, the firewall settings will automatically adjust to allow the SMB packets.
If you are having trouble with scan to SMB, you may want to check the firewall settings on the client:
Windows 7:
Control Panel -> Windows Firewall -> Advanced Settings -> Inbound Rules -> Locate "File and Printer Sharing (SMB-In)", right-click and "EnableRule". The default should be set to allow the packets.
Vista:
Control Panel -> Windows Firewall -> Change Settings -> Exceptions -> Ensure File and Printer Sharing is checked
Note: This article is based on the Enterprise editions on Windows 7 and Vista and may differ slightly on other versions.
Changing the Security Policy
If you are using windows 7 ultimate/professional try to change the security policy.
Computer side.
Start -- Run> type secpol.msc
Open up the local security policy > Navigate to Local Policies -> Security Policies
Change Network Security: LAN Manager authentication level to: Send LM & NTLM - Use NTLMv2 session security if negotiated.
Close security policy and reconnect to the share. If it still doesnt work change the encryption level to not require 128 bit encryption.
Open Network security: Minimum session security for NTLM SSP based (including secure RPC) clients and uncheck the require 128 bit.
Open Network security: Minimum session security for NTLM SSP based (including secure RPC) servers and uncheck the require 128 bit.
Restart the computer.
Review the settings on the Windows 7 computer under Contol Panel>Network and Internet>Network and Sharing Center>Advanced Sharing Settings. Confirm that the settings are set for sharing the necessary folders.