Find answers to commonly asked questions about concepts and scenarios related to Universal Print.
Universal Print basics
What is Universal Print?
For organizations committed to the Microsoft 365 cloud, Universal Print is the modern, cloud-based print solution that provides robust and centralized print management capabilities and a straightforward end user experience, while eliminating the need to maintain traditional on-premises print servers, active directory, or install printer drivers. Universal Print is a multi-tenant print solution service hosted on Azure. For organizations that are committed to Microsoft 365 cloud, it replaces the Windows Server print server functionality.
- It is fully cloud based: setup, configuration, management and troubleshooting
- It works with new ‘UP ready’ printers, but provides a transition for existing printers
- It offers a familiar Windows print experience for users (discover, install and print)
- It enables extensibility for an ecosystem of managed print service providers
Universal Print allows IT departments to configure their organization's printers so that employees can print seamlessly from any device, and for organizations to lower the cost of printing, while supporting their business needs. Printer manufacturers, software providers, and service providers can build on the cloud service to deliver advanced functionality.
Who is Universal Print for?
Universal Print is for customers who are moving to the cloud and need the ability to print using a cloud service, as Microsoft Entra ID joined devices are unable to discover printers on local print servers. Therefore, customers seek a solution from Microsoft to remove the need for on-premises print servers and gateways.
What are Universal Print ready or compatible printers?
A Universal Print ready / compatible printer is a printer that has a Universal Print compatible firmware. Printer manufacturers are releasing new printers that are Universal Print ready. Printers currently in the market may become Universal Print ready with firmware updates. See the Universal Print web page to find out more about Universal Print ready printers and print solutions from our partners.
Does Universal Print also work with hybrid setups where devices are joined to Active Directory and Microsoft Entra ID?
For Universal Print, Windows devices must be connected to Microsoft Entra ID. Hybrid joined devices will work too provided they are joined to Microsoft Entra ID. You can check if a device is joined to Microsoft Entra ID by launching command prompt and running the following command:
dsregcmd /status
Licensing and Pricing
How will Universal Print be licensed/priced?
Read Get access to Universal Print for more details.
Universal Print connector
What is the Universal Print connector?
We have a connector for current printers that have no updated firmware. The connector is a small Windows application that can connect many printers to the Microsoft 365 cloud, and can run on any Windows PC on the network. Refer to Installing the Universal Print connector for more information.
Can I install the connector on Windows Server? What is the minimum server version?
Yes, the connector can run on a Windows Server. Refer to Installing the Universal Print connector for minimum version support.
Can I install the connector on an Azure Virtual Machine (VM)?
Yes, if the VM has network access to the printers on the organization's network.
Can I install the connector on a Linux OS?
No, the connector is only available for Windows Client and Windows Server.
What is the maximum number of printers the connector can support?
There is no enforced maximum. It depends on available resources on the connector PC. Please refer to the article about connector configuration for detailed guidance.
Is the machine with the connector installed on it required to be on-premises and always on?
Connector needs to be connected to the same network as printers, available 24x7 and connected to internet. Connector is a solution to support your existing printers. As new printers that support Universal Print natively are launched, the connector won’t be required for those printers.
Is Universal Print available in Government?
Universal Print is currently available in both GCC and GCC High. For more information, please see our Universal Print in Government documentation.
Security
What kind of encryption is used?
All the data in transit is encrypted using SSL (https) with TLS 1.2. In the cloud, print data is stored the Office storage partitioned for each customer - this is same storage used for mail, OneDrive etc.
How is the print job stored in Universal Print service when its queued?
Universal Print stores all print queues in Office data storage. This is the same storage that stores customer's Office 365 mailboxes and OneDrive files.
Does the job remain on the Universal Print service after printing? If the printer cannot be reached, is there a pruning schedule?
A job stays in the print queue for a few days. If job is not claimed at the printer within three days, it gets marked as aborted. Even after printing, a job may stay in Universal Print for a few more days (up to a total of 10 days).
Does Universal Print support pull printing capabilities?
Universal Print currently does not have these capabilities, but we are working on coming up with new features to address customer needs. Please file new ideas or vote for the existing ones at Universal Print Feature Requests
Does Universal Print work with Role based access control (RBAC)?
Microsoft Entra ID users and groups are used for assigning access to printers.
Are firewall exceptions required for Universal Print to access on-premises printers? Does it work through a proxy server?
None! There are no incoming requests to printers or connectors (all requests are outgoing). As long as Universal Print endpoints are not blocked, everything will work.
What are the set of endpoints that Universal Print uses?
Note that using wildcards, e.g. "*.print.microsoft.com" and "*.applicationinsights.azure.com" may be preferable for firewall configuration for simplicity or in case new services or endpoints are deployed in future.
Commercial
- Print service = https://print.print.microsoft.com/
- Registration service = https://register.print.microsoft.com/
- Discovery service = https://discovery.print.microsoft.com/
- Notification service = https://notification.print.microsoft.com/
- Print Graph service = https://graph.print.microsoft.com/
- Microsoft Graph service = https://graph.microsoft.com/
- Microsoft Entra ID = https://login.microsoftonline.com/
GCC
GCC uses Commercial endpoints as well as the following:
- Print service = https://gcc-print.print.azure.us/
- Registration service = https://gcc-register.print.azure.us/
- Discovery service = https://gcc-discovery.print.azure.us/
- Notification service = https://gcc-notification.print.azure.us/
- Print Graph service = https://gcc-graph.print.azure.us/
GCC High
- Print service = https://print.print.azure.us/
- Registration service = https://register.print.azure.us/
- Discovery service = https://discovery.print.azure.us/
- Notification service = https://notification.print.azure.us/
- Print Graph service = https://graph.print.azure.us/
- Microsoft Graph service = https://graph.microsoft.us/
- Microsoft Entra ID = https://login.microsoftonline.us/
Connector
In addition to the relevant endpoints above, the Universal Print connector needs access to the following:
- Azure portal authentication endpoints
- Azure portal framework endpoints
- If your tenant is in Europe: https://northeurope-2.in.applicationinsights.azure.com/
- Or if your tenant is anywhere else: https://westus2-2.in.applicationinsights.azure.com/
Is Universal Print available for US Government Community Cloud (GCC) or/and other sovereign clouds?
Universal Print is available in GCC and GCC High. Please see here for more details.
Printer Locations
Can this be configured to manage many printers over multiple locations?
Yes. With Universal Print, users can print to any printers within their organizations by just connecting to internet.
Are users required to be on local network or connected to Virtual Private Network (VPN) to print with Universal Print?
There is no need for VPN or being on same local network.
My user has rights to use hundreds of printers in various locations. How does Universal Print offer the nearest one to the user?
Universal Print offers multiple ways in which a location can be specified. You can use the Country, City, Building, Floor etc. Alternatively, we have built GPS based location proximity. If admin specifies the latitude and longitude of the printer in Universal Print portal, and same is available for the user, we will do the nearest match.
Will Universal Print be able to automatically map printers based on location like third-party solutions?
Yes. If the user has GPS location, and admin has specified printers' locations with latitude and longitude, then the printers can be found based on proximity.
Print Management
Can print administrator set default Printing Preference when using Universal Print?
Yes, the Universal Print section in administrative portal allows you to configure default printing preferences for each printer.
Can we script access control for each printer to a group of users, say in the Azure PowerShell?
PowerShell is on our roadmap. Details will be shared soon. Tools can also use Graph API. To learn more, visit Universal Print cloud printing API overview.
What reporting functionality is available through Universal Print?
Currently administrators have access to a basic set of reports that include print usage grouped by user or printer.
Is multi-tenant management possible?
Universal Print has been validated to work within the same Microsoft Entra ID tenant. To enable printing across tenants, you may create a new feature ask or vote for an existing one at Universal Print Feature Requests.
Can the registration process be done via a script or other batch type to register a large amount of printers?
Some bulk capabilities already exist (like registering multiple printers at the same time on a single connector). We are working on PowerShell support which will enable writing scripts for bulk jobs. Additionally, we are considering bulk scenarios for UI improvements as well. For specific ideas we recommend you to create a new feature ask or vote for an existing one at Universal Print Feature Requests.
Does printer assignment support nested and dynamic Microsoft Entra ID groups?
Yes, access control to the printer supports them.
Hybrid Cloud Print (HCP)
Why should an organization choose Universal Print over Hybrid Cloud Print?
Universal Print is a replacement for Hybrid Cloud Print. Universal Print addresses additional scenarios, and is much easier to set up and scalable.
User is unable to add Universal Print printers from a Windows device that was configured for Hybrid Cloud Print. Is there anything required to be done on the device?
For Windows device to work with Universal Print, HCP settings need to be cleaned up. Delete the following registry key to clean-up HCP settings:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\<SID>\EnterpriseCloudPrint
If Intune or any other MDM solution was used to deploy the HCP setting, then ensure that the corresponding policy is removed. Otherwise the HCP setting will be pushed again on the Windows device.
Miscellaneous
What is the Universal Print Service Level Agreement?
Please take a look at Service Level Agreements (SLA) for Online Services. Check the latest version of the SLA and look for "Universal Print" in the table of contents.
Can we choose PostScript (PS) vs. PCL driver types that get pushed to user's machines?
There is no driver pushed to the users' machines. Support to print to Universal Print is built into Windows.
Does Universal Print driver support PCL, PS or other PDLs?
Universal Print is based on PWG's IPP standard, and supports IPP PDLs. We are working through the list of those PDLs.
Are printers installed as local TCP/IP devices?
Universal Print printers connect to internet and spool jobs in cloud using the service hosted in Azure.
Does the print job always go via Azure even when the client and printer are on the same Local Area Network (LAN)?
Currently all jobs are spooled in cloud and routed via Azure. For new feature ideas or to vote for the existing ones, please go to Universal Print Feature Requests.
Can a user still print if their device is not connected to the internet?
No, user will not be able to print unless the device is connected to internet. Connector needs to be connected to the Universal Print service via internet as well to get the print jobs that are spooled in the cloud.
Does Universal Print support label printers?
Universal Print provides limited support for label printers. Please see details in this article.
Does Universal Print support plotter printers?
Universal Print currently supports page printers only. We made these printers the higher priority because they are more widespread and versatile.
Plotter printers are a totally different class of printers that require special handling of paper roll size definition and other plotter specific functionalities. We plan to investigate adding support for plotter printers in Universal Print. We currently have no projected date of when they will be supported.
If you still have a question that is unanswered, reach out to the Universal Print technical community
What are the known limits of Universal Print?
- The Universal Print connector: please see this article about the right number of printers to register from each connector.
- Per user printing limit: a single user can print a total of 1 GB every 15 minutes. If the total size of print jobs for a given user exceeds 1 GB in a 15-minute window, then subsequent print jobs during that window will fail. This is not affected by the number of copies (e.g., If a user sends a 1 MB print job of which they need 5 copies, the data size that counts towards the limit is still 1 MB).