From what you’ve described, Universal Print itself is healthy (users can see printers, jobs make it to the connector, connector impersonates successfully). The breakdown is happening at the print server spooler > physical printer handoff. The clue is the Event Log entry “Print Document owned by …” which usually means the job was submitted to the Windows spooler, but never leaves the queue (or gets discarded).
So I have some steps you should have a check and let me know the result :
- Verify whether jobs are reaching the local print queue
- Open Print Management on the 2022 server.
- Watch the queue of the affected printer as the failing user prints.
- Does the job appear and then disappear immediately, or does it remain stuck?
- Disappears immediately → The spooler thinks it printed but the printer never saw it (common with driver/permissions mismatches).
- Remains stuck → Connectivity/driver issues between server and printer.
- Check connector impersonation account rights
- Universal Print Connector impersonates the user and submits jobs with their token.
- On the print server, that means the user (not SYSTEM) needs Print and ideally Manage Documents rights on the queue.
- For users that fail:
- Compare their AD group memberships to the working users.
- Right-click the printer → Printer Properties → Security tab.
- Ensure those users/groups have proper print permissions.
- Driver isolation and compatibility
- Half the users working, half failing often points to a driver issue (mode of rendering).
- Universal Print Connector supports Type 3 (user-mode) drivers only. If the queue is using a v4 or vendor driver, jobs may render differently depending on the application or user profile.
- Try:
- Switching the printer to the Microsoft IPP Class Driver or a Type 3 universal driver.
- Enabling Render print jobs on client computers in printer properties → Advanced.
- Spooler / Event Logs
Check Event Viewer > Applications and Services Logs > Microsoft > Windows > PrintService > Operational for:
- Event ID 808 / 842 (job received/printed).
- Event ID 372 / 808 / 6161 (job failed, access denied, rendering errors). See if the failing users have consistent error codes.
- Network path to physical printer
Make sure the print server itself can always reach the device:
-
pingthe printer. - Try printing a test page from the server (not Universal Print). If that fails, it’s between server and printer.
- Test with service account / SYSTEM
As a control, temporarily configure the connector to submit jobs as the connector host account (instead of impersonation). If printing works, the issue is purely user rights/token.