Universal Print Setup
Audience: IT administrators with Printer Administrator role
Purpose: Deploy cloud-based printing without on-premises print servers
Quick Reference
- Cloud Integration — Always prefer manufacturer cloud integration over print connectors
- Printer Shares — End users see printer shares, not raw printer entries
- Secure Print — QR code release requires Microsoft 365 app only
- Conditional Access — Theoretically possible via Enterprise Application
Prerequisites
| Requirement | Details |
|---|---|
| Azure Portal Access | Sign in at portal.azure.com |
| PIM Role | Printer Administrator (activate via PIM if needed) |
| Printer Inventory | List of printers to enroll |
| Connection Type | Determine cloud integration vs. print connector |
Determining Printer Type
Always choose cloud integration over print connector when available. Cloud connections are manufacturer-designed and support more features.
Check if your printer supports cloud connection:
| Connection Type | Description | Best For |
|---|---|---|
| Cloud Integration | Direct manufacturer integration | Modern printers with support |
| Print Connector | Windows service bridges legacy printers | Older printers |
Setup Procedure
Step 1: Sign in to Azure Portal
- Navigate to Azure Portal
- Sign in with credentials
- (If needed) Activate Printer Administrator via PIM portal
Step 2: Add Print Connector (If Required)
For printers without cloud integration:
- Follow Install Universal Print connector on Windows
- Once configured, connector appears automatically in Universal Print portal
- All printers on connector server will be enumerated
Step 3: Add Printers
Cloud Connector Printers
Follow manufacturer instructions for enrolling the printer directly with Universal Print.
Print Connector Printers
- Add printer to Windows on the connector server (standard process)
- Printer will appear in Universal Print portal automatically
Step 4: Configure Printer Properties
- In Universal Print portal, go to Printers tab
- Select your printer → Properties
- Add location information (building, floor, room)
Step 5: Create Printer Shares
Printer shares are what end users see. Create one share per printer with a user-friendly name.
- In Universal Print portal, go to Printer Shares
- Click Add new share
- Enter display name for users
- Select target printer
- Add users/groups with access
Known Issues
Secure Print Limitations
| Issue | Details |
|---|---|
| QR Code Only | Secure Print currently only supports QR code release |
| M365 App Required | QR codes only work with the Microsoft 365 app |
| All-or-Nothing | Printer uses either secure release OR normal release, not both |
If you configure secure release, that printer will always require the M365 app to release prints—no exceptions.
Advanced Management
Enterprise Application
Universal Print registers as an Enterprise Application in Entra ID:
- Used for user authentication via non-interactive sign-ins
- Conditional Access policies are theoretically possible
- Not generally recommended but available for advanced scenarios
Integration with Intune
Deploy printers to devices via Intune:
- Configure printer shares in Universal Print
- Create Intune configuration profile
- Deploy to device groups
- Printers appear automatically for targeted users
Related Resources
- Azure Platform — Azure services
- Intune Documentation — Endpoint management
- Official Universal Print Instructions — Microsoft documentation
- Universal Print Ready Printers — Compatibility list