Forum Discussion

RonS_'s avatar
RonS_
Copper Contributor
Apr 12, 2024

Windows Universal Print and HP Universal Print NOT working as expected.

Informed our client that HP printers were compatible with WUP as long as the vendor's product was certified by the vendor as 'supported'.  Client purchased a printer which was installed on-site, and ...
Saurabh_Bansal's avatar
Saurabh_Bansal
Icon for Microsoft rankMicrosoft
Apr 18, 2024

RonS_ - first of all sorry to hear that you are facing this issue.

 

When you print the job - can you see it in Universal Print portal (under the Jobs view of the printer)? What status does it have there?

 

Once the job is in Pending state, printer (or in this case the app on HP printer) will download the job and process it on the printer. Later it will post the status of job back in Universal Print.

 

From what I am reading below - job has reached Universal Print. There is some issue happening on the printer (or app) itself and reading the error gives me an impression that login to the app is failing. 

 

Are you using Conditional Access? If yes - then login on the app WILL NOT work. This is because HP printers are running and "unknown" version of Android which is not monitored by Intune. With CA policies, user login from such "unknown" OS is blocked. This is a security feature of Entra Id and I am hoping you can understand why CA is blocking the login.

 

You may want to work with your security admin to relax the CA policy on this device or work with HP to see if they can provide a mitigation.

  • RonS_'s avatar
    RonS_
    Copper Contributor
    Apr 19, 2024

    Saurabh -
    No need to say 'sorry'. We have been working with HP, and HP informed that they are aware of 'issues' using HP Workpath. The 'integration' with MUP is apparently 'not' exactly 'native'. You should know that we have set the app (HUP) to be excluded from the CA policy, but that does not resolve the issue of printing. Had an issue with Admin granting 'consent' to the app, but that was finally successful after multiple attempts. (odd issue) So again - the jobs are NOT going to the print share or printer and do not show in the printers job list, they only error out on the sending device (Win 11 computer). We did not open a case with MSFT as we believe per your documentation that the UEM vendor is really responsible for knowing how to get their printer and application to work/integrate with MUP. That said, any suggestions are welcome.

    One more thing - you are correct on the 'known' issue with the 'unknown'/vendor modified flavor of Android used by HP print OS and that brings up the question of device authentication.  Is MSFT suggesting that if the printer OS was 'capable' of registering in Intune that this issue might be negated?

    • Saurabh_Bansal's avatar
      Saurabh_Bansal
      Icon for Microsoft rankMicrosoft
      Apr 19, 2024

      RonS_ There are two issues with CA on printer device:

      1. Registering a printer - This can be mitigated by updating the CA policy to "exclude" the Universal Print app and the app that registers the printer.
      2. Log-in on HP Workpath app - I am not a Entra login or CA expert so not 100% sure :sad:. However, as far as I understand it not just the app that is blocking login but the device on which app is running since device is recognized as not compliant. 

      I will try to see if there is a way to somehow exclude this device - but keep in mind that's something a security expert/admin may not like 🙂 

Resources