KM MFD Configuration
The implementation of Papercut for shared accountable and restricted printing at SFU is in fact a printing option only. In the case of actual printers, this presents no problems; enable the printer's firewall to only talk to the the print server and the KM monitoring server and it's done.
In the case of KM MFD devices .. devices able to photocopy .. it's not quite so simple. Papercut is not able to account for, or restrict "off the glass" usage. Most departments will want to "lock down" the copying to their staff only (if they haven't already done so), but the default configuration typically used does not allow the sharing of the printer.
There is a way to do this, and this document describes the reasonably simple steps to do so.