Install Distributed Scan Server

Applies To: Windows Server 2012

This guide describes how to install and configure Distributed Scan Server on a single computer running Windows Server 2012. Distributed Scan Server is a server role included in the Print and Document Services server role. You can use Distributed Scan Server to help you automate document processes in your organization and provide a central administration point for sharing and managing network scanners.

For information about Print Servers, see Print and Document Services Overview.

New for Windows Server 2012, the Scan Server now supports Kerberos user authentication for connections to the scan server. In addition, when adding a scan process you have the option to allow the user to enter a document name at the scanner, and the option to send a copy of the scan to the user’s email.

You can install role services using the Add Roles and Features Wizard. However, after you complete the wizard, you must add, share, and configure network scanners separately. As part of installation, associated Microsoft Management Console (MMC) snap-ins, services, and other tools are installed. You can use these tools to perform the additional sharing and configuration tasks.

To perform all tasks described in this topic, you must be a member of the Administrators group, or you must have been delegated the appropriate permissions. For more information about configuring user and group permissions, see Change Permissions for Scan Users and Groups for scan servers (https://go.microsoft.com/fwlink/?LinkId=171019).

This guide contains the following sections:

• Step 1: Install software

• Step 2: Configure the server

• Step 3: Add and share scan devices

Step 1: Install software

You can use the Add Roles and Features Wizard in Server Manager to install the Print and Document Services role (needed for the Distributed Scan Server role service) and associated role services, MMC snap-ins, and tools.

The following MMC snap-ins are installed:

• Print Management. This snap-in enables you to manage printers, print queues, printer drivers, and printer connections.

• Scan Management. This snap-in enables you to manage scanners and scan processes. Scan processes allow you to define how to process scanned documents, and then route them to network folders, SharePoint sites, and to e-mail recipients. Remote management is not supported. To administer a Distributed Scan Server, you must do it from the local console.

  Important

  The Distributed Scan Server role requires scanners that support Distributed Scan Management (DSM). Windows Server 2012 implements DSM and uses Web Services on Devices (WSD) technologies to integrate scanning devices into the system. For more information about DSM see Distributed Scan Management (DSM) in the MSDN Technical Library at https://go.microsoft.com/fwlink/?LinkId=204841.

You can also use these snap-ins to define user and group security permissions for accessing and using network printers and scan processes.

To install the Print and Document Services role

1. Click Server Manager on the taskbar.

2. Click Add roles and features on the Dashboard.

3. In the Add Roles and Features Wizard, on the Before you begin page, click Next.

4. On the Select installation type page, verify that Role-based or feature-based installation is selected and click Next.

5. On the Select destination server page, verify that your target server is selected and click Next.

6. On the Select server roles page, select Print and Document Services and click Add Features and then click Next.

7. On the Print and Document Services overview page, click Next.

8. On the Select features page, click Next.

9. On the Select role services page, click the Distributed Scan Server check box and verify that the Print Server box is checked, and then click Next.

10. On the Confirm installation selections page, click Install.

11. Click Close to close the wizard and then restart the server.

Step 2: Configure the server

Part of the configuration of the server takes place during installation. However, there are a few issues that might apply to your environment that involve post-configuration, including the following:

• To detect Web Services on Devices (WSD) printers and scanners to view and monitor them on your network, network discovery must be enabled. To detect WSD printers, the Device Association Service must also be running.

• Write and List permissions are needed to run scan processes. The Read permission is needed to read scan processes stored in Active Directory Domain Services (AD DS). You should consider removing any unneeded permissions from the Distributed Scan Server service account.

This section contains the following instructions:

• To detect WSD printers and scanners on the network

• To configure settings for the scan server

To detect WSD printers and scanners on the network

1. To enable network discovery of printers and scanners, right-click the Start charm, click Control Panel, and then click Network and Internet.

2. On the Network and Internet page, click Network and Sharing Center.

3. On the Network and Sharing Center page, click Change advanced sharing settings.

4. On the Advanced sharing settings page, click the Domain drop-down arrow, click Turn on network discovery, and then click Save changes.

5. Then, to start the Device Association Service, right-click the Start charm, click Computer Management, under Services and Applications click Services.

6. In the center pane, right-click Device Association Service, and then click Start.

To configure settings for the scan server

1. Open Server Manager.

   Important

   The Distributed Scan Server role requires scanners that support Distributed Scan Management (DSM). Windows Server 2008 R2 implements DSM and uses Web Services on Devices (WSD) technologies to integrate scanning devices into the system. For more information about DSM see Distributed Scan Management (DSM) in the MSDN Technical Library at https://go.microsoft.com/fwlink/?LinkId=204841.

2. In the menu bar, click the notification flag. You will see a post-deployment notification for Distributed Scan Server. Click Perform additional configuration. The Scan Management console opens.

3. Ensure that Scan Servers is selected in the left pane. In the right pane under Actions, click Configure local scan server. The Scan Server Configuration Wizard opens.

4. Follow the instructions in the Scan Server Configuration Wizard to change the scan server service account, e-mail server information, temporary scan folder and size, SSL encryption certificate, user authentication (Kerberos or client certificates) for the scan server security option.

   Important

   If you choose Require User Authentication for your security setting option, you must ensure that the Scan Operators group has write access to the scan server’s computer object in Active Directory. To do this, use the following procedure: Open Active Directory User and Computers. Click View and click Advanced Features. Expand your domain, and then expand either the Computers or Domain Controllers folder depending on where your scan server computer is located. Locate your scan server computer account, then right-click it and click Properties. Click the Security tab, and then click Add. In the Enter the object names to select text box, type scan and then click Check Names. The Scan Operators group should appear in the text box. Click OK. In the Permissions for Scan Operators area, click the Write check box and then click OK. Close Active Directory Users and Computers.

5. After the scan server is configured, download the Active Directory Schema Extensions LDF file to your domain controller if you have a Windows Server 2003 or Windows Server 2008 domain environment. This file is available from the Microsoft Download Center at Windows Server 2008 R2 Distributed Scan Management Active Directory Schema update (https://go.microsoft.com/fwlink/?LinkId=150121). This LDF file extends the AD DS schema to include scan process container objects. Scan process information is stored in AD DS. After you apply this schema, the scan servers you set up in the domain will work with the new schema.

Step 3: Add and share scan devices

Now you are ready to add and share devices.

You can use the MMC snap-ins to manage printers and scanners that are located on the same subnet as your server.

You can use the Scan Management snap-in to add scanners that you want to manage on your network. Remote management is not supported. To administer a Scan Server, you must do it from the local console.

To add a network scanner to the scan server

1. Click the Start charm, and then click Scan Management.

   Important

   The Distributed Scan Server role requires scanners that support Distributed Scan Management (DSM). Windows Server 2012 implements DSM and uses Web Services on Devices (WSD) technologies to integrate scanning devices into the system. For a list of scanners available that support DSM, see Distributed Scan Management (DSM) Scanners. For more information about DSM see Distributed Scan Management (DSM) in the MSDN Technical Library at https://go.microsoft.com/fwlink/?LinkId=204841.

2. In the left pane, click Scan Management, right-click Managed Scanners, and then click Manage.

3. To add a scanner, in the Add or Remove Scanners dialog box, type the host name, IP address, or URI of the scanner, and then click Add.

   Note

   Scanners must support WSD. TCP/IP and USB scanners are not supported.

Additional resources

For more information, see the following resources on the Microsoft Web site:

• For information about Print and Document Services, see Print and Document Services Overview

• For information about Fax Server, see Fax Server Step-by-Step Guide

• To read and participate in discussions with Microsoft and industry professionals, see the Print/Fax Forum, which is included in the Windows Server Forums (https://go.microsoft.com/fwlink/?LinkId=171028).

• For information about WSD for scanners and printers, see Implementing Web Services on Devices for Printing and Scanning (https://go.microsoft.com/fwlink/?LinkId=144068).