Share via


Migrating to Universal Print from an on-premises solution

Universal Print offers several benefits when compared to on-premises print solutions, but a successful migration requires some new knowledge, thoughtful planning, and careful execution.

How does my existing on-premises infrastructure look in a cloud world?

You no longer need print servers

Universal Print doesn't require print servers. Depending on which printers you have, your Universal Print infrastructure will look a bit different than what you have now.

  • If all your printers are Universal Print ready, your organization can achieve the optimal Universal Print experience, where the only on-premises hardware are your printers, which connect directly to Universal Print.
  • If some of your printers aren't Universal Print ready, you can register them with the help of the Universal Print connector. It can be installed on a VM or physical machine within your network boundary and act as a lightweight proxy to connect non-Universal Print ready printers.

You can forget about drivers

Universal Print does not use drivers because they are difficult to maintain, cause problems for users, and can introduce security vulnerabilites. Instead, Universal Print connects to your printers by using the Mopria standard protocol which is supported by millions of printers.

To support differentiated and advanced print functionality on Windows, printer manufacturers can develop Print Support Apps (PSAs) that make custom functionality available to users in a more secure way, without the need for drivers.

No VPN, and simplified network configuration

Because all printing and management functionality works over the internet, users don't need to be within your network boundary or connected to a VPN to print.

Additionally, Universal Print does not make inbound connections into your network, so all that's required to enable Universal Print is allowing outbound connections to a small set of endpoints.

Manage everything in one place

Everything related to your print environment is in the Microsoft cloud, so everything is easy to find.

All your users (and printers!) have identities within Microsoft Entra ID. Instead of sharing a printer and authorizing users in Windows Server, you'll use Azure Portal to share printers and assign user/group permissions.

Usage is measured by jobs instead of pages, printers, or queues

You may be used to tracking print usage by the number of printers or queues in your environment, or the number of pages that are printed. With Universal Print's reporting feature, you can still track those volumes.

However, print jobs are the primary unit of accounting in Universal Print. The volume of print jobs your organization typically needs will inform both your licensing and architecture decisions.

Common questions about migrating to cloud printing

Many prospective customers start by asking similar questions, to see if cloud computing is for them.

Will my print data be less secure because it's leaving my network?

  • Your data will be even more secure because it's processed and stored within Microsoft's industry leading security infrastructure & monitoring.
  • The same infrastructure that powers Exchange, Teams, Office, and other mission critical services processes all your Universal Print customer data.
  • Your data is encrypted end-to-end and at rest. You can even bring your own encryption key that will be applied in addition to Microsoft's, so that even Microsoft couldn't decrypt your data.

Will printing be slower or less reliable because it requires a round trip to/from the cloud?

  • Our existing customers are satisfied with latency and haven't experienced any significant issues across multiple print use cases.
  • Depending on your network conditions, some larger print jobs may take longer than they did before because the data must be uploaded to, and downloaded from, the cloud service.

Will it work with my existing printers and endpoint devices?

  • Universal Print works with all your existing printers. Universal Print ready printers which have been upgraded to connect to Universal Print directly will provide the ideal experience, but all of your existing printers can be used with the Universal Print connector app.
  • Universal Print includes support for "Printer Support Apps" which let printer manufacturers expose advanced functionality on Windows, even when using standard print protocols to communicate with Universal Print.
  • Users on any endpoint can print, with a broad range of support across Windows, macOS, and the web. Support for printing natively from mobile is coming soon.

Will it actually save me money?

  • Universal Print is included with many Windows and Microsoft 365 subscription licenses that customers already have, which means it adds no additional cost in many cases.
  • You'll save the most money with Universal Print if you:
    • Spend money buying & maintaining print servers (Universal Print doesn't require print servers)
    • Spend time & effort troubleshooting and maintaining print servers (Universal Print doesn't require print servers)
    • Operate a VPN and one of the primary reasons you maintain it is print (Universal Print doesn't require a VPN)

Migration steps

Firstly: Try Universal Print or click through the demo to learn about all the features.

Step 1: Get access to Universal Print

Check if you already have access, and assign eligible licenses to the users and IT admins that need access. If not, purchase eligible licenses from your regular channel.

  • To print, users must be assigned an eligible Universal Print license
  • To manage Universal Print, administrators must be assigned an eligible license and at least one of the following Microsoft Entra ID roles: Global Administrator, Print Administrator, or Printer Technician. See the differences here.

Step 2: Check prerequisities

To print, a user's environment must meet these prerequisites:

  • If printing from Windows, version 1903+ is required.
  • If printing from macOS, Ventura 13.3+ is required.
  • All endpoints (users' devices and printers) must be able to access the below list of endpoints:
Environment Endpoints
Commercial
GCC GCC uses Commercial endpoints as well as the following:
GCC High

Step 3: Determine how you'll connect printers

Because Universal Print communicates with printers using the Mopria standard, many printers can connect directly to the service without any additional infrastructure. Mopria certified printers that have updated firmware with Universal Print support are called "Universal Print ready" printers.

  • Your Universal Print ready printers can be registered with Universal Print directly, without any additional software or infrastructure.
  • Your printers that are not Universal Print ready can be registered by using a connector. See below for how to set up a connector.

Refer to the list of Universal Print ready printer models to see whether you need a connector. If a printer is Universal Print ready, you'll have the best performance and management experience by registering it directly with Universal Print instead of using the connector.

Step 4: Install connector(s) if needed

If any of your printers aren't Universal Print ready, you'll need a connector to register them. You can install the connector on a physical machine within your network boundary, or use an Azure VM to host it.

Follow the connector installation instructions to satisfy the prerequisites, install the connector service, and register it with Universal Print.

Step 5: Register printers

The process for registering printers depends on whether the printer is Universal Print ready.

  • If the printer is Universal Print ready, refer to the printer's manual for specific setup instructions.
  • If you're registering the printer using a connector, follow the steps to register a printer using the connector.

Step 6: Configure printer settings

After registering your printers, use Azure Portal to configure settings. In particular:

Step 7: Share printers with users

Universal Print has a familiar distinction between queues and shares if you've managed a Windows print server.

After registering a printer (creating a queue), it must be shared so users can access it. Sharing a printer controls who can use it and what name they see when discovering printers. You can share printers with all users, or with specific group(s) of users.

To share your registered printers with users, follow the instructions to share printers using Azure Portal or PowerShell.

Step 8: (Optional) Deploy printers to users using Intune

To create a seamless experience for users, their most commonly used Universal Print printers can be automatically installed on Windows devices by using Intune. This is supported for devices with Windows 11 and Windows 10 21H2+.

Follow the Intune instructions to create a Universal Print policy.

Step 9: Send instructions to users

Let some users try it out, or deploy it broadly. Educate users about what's different. You can start with these example instructions as a baseline.

Step 10: Monitor and troubleshoot the rollout

After rolling Universal Print out to users, you'll want to keep an eye on the usage and health of the rollout.

  • Keep an eye on usage by using the Usage and reports page in Azure Portal. Most organizations find that the print job quantity included with their licenses is sufficient, but if you need additional jobs, you'll need to purchase add-on packs.
  • Monitor printer health by using the Printer list in Azure Portal to keep an eye on printer health. If you encounter issues, follow the troubleshooting guide and look at the list of known issues to see if we're already aware of your issue and working on a fix for it.
  • Contact support if you can't fix your issue by using the documented troubleshooting steps, and we'll be happy to help solve the problem to get you up and running.

See also