deploy printers with Intune config

Question

Hey,

I have a question about installing printer drivers from print server to Azure AD joined devices.
My solution may be too simplistic, but I'll give it a try anyway.

I find extremely complex structures on the internet for doing this, but in some they turn out to be inapplicable.

I have created a configuration profile in Intune, which contains the link to the driver on my print server.
This profile was successfully forwarded to my device, but the printer is not reaching my available printers.

What have I done wrong (or not done)?

Be gentle, I'm new to all this :)

Some screenshots

Answer 1

Hi,

Thanks for your comment.
However, when I look at the "user scope" this is only to set a default of an already installed printer.
I need a scope to also install the printer with a driver on print server.

Answer 2

Hi @Ronny Cornelis

The user is admin on the client system, correct? That is the new default requirement from Microsoft for Windows Point and Print in order to install the software from the server on the client system. Admin or access to administrative credentials.

There is a registry setting you can push out if you do not allow users to be administrators.

MS talks about that here: https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

Thanks

Answer 3

Hi, TheAlanMorris

Users do indeed have the right to install printers themselves.
These are shared on the print server and are accessible.
However, I cannot get those print drivers installed with a configuration profile in Intune.

Answer 4

I think you are saying print driver but you actually mean you want to add a connection to a shared printer.

When the driver used for the shared printer is Type 3, adding the connection to the shared printer will deliver the print driver to the client when the connection can be created successfully.

When the driver is Type 4, there are no dll to deliver for the connection.

Yes, I do get it, folks say adding the driver all the time when they mean adding a printer even though adding a driver does not always occur when adding a connection to a shared printer.

I don't know how Intune configurations are applied to computers and the plumbing for adding a printer using Intune occurred after I left Microsoft.

If the spooler is executing the command to add the connection you may find hints of what is happening in the PrintService / Operational events. They are not enabled by default Enable this log on the client.

Applications and services / Microsoft / Windows / PrintService.

Ideally, if the Intune team talked to the spooler team, they will be calling AddPrinterConnection2.

If there is nothing in the event log then it sounds like the Intune thing is not honored by the system at all.

Thanks

Answer 5

Hi @Ronny Cornelis

If you choose to have a default printer set in tune, it's important to consider that, if a user changes their default printer to something of their preference, then this setting will not stick.

If you mean to add printer drivers from the print server to Azure AD joined devices there are different options to achieve this and one such method is to add them using Device Restrictions. You can follow the steps from the below article.

Windows 10/11 device settings to allow or restrict features using Intune
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#printer

Hope this resolves your Query!!

--
--If the reply is helpful, please Upvote and Accept it as an answer–