Disable all scanning except workflow scanning then setup scan to home and network authentication.
User goes to machine , selects Workflow Scanning and the only template would be the Scan to home template that goes to their home directory per the LDAP settings.