Guest post by Microsoft Customer Engineer, Daniele De Angelis.
It's a pleasure to be here again on the ITOpsTalk.com .
Recently I had the opportunity to try the Microsoft Universal Print, the new cloud printing service on Azure.
Today I want to share with you a scenario where you can implement and manage this new great Azure cloud service.
Here the fast link to the specific steps:
UP Requirements
STEP 1 - Assign Universal Print License to users
STEP 2 - Install the UP Connector
STEP 3 - Register the Printers
STEP 4 - Share the Printers
STEP 5 - Add Printers on W10 Clients
SCENARIO DESCRIPTION
We have an enterprise company called ITOpsTalk Corp located in Rome that actually has a few people working onsite (the CEO is one of this peoples "the Capitan never leave the boat") and many others instead are working from home. The IT department want to give the possibility to the remote users to print documents in the HQ in Rome by registering the printers located on the corporate print server to the cloud. Also the financial consultant of the company, located in Milan is working from home and she is responsible to send to the CEO the Financial documents to sign, but how she can locate the printer in the CEO Office?
TECHNICAL DETAILS
The ITOpsTalk corp actually do not have Universal print compatible printers, but have standard network printers, also the IT department is using a Printer Server on Windows Server 2016 to centrally manage the the printers. All the remote users and the financial consultant are using a Windows 10 build 1909 joined to Azure AD in the ITOpsTalk Tenant.
UP REQUIREMENTS
- Cloud Requirements:
-
An Active Azure AD tenant. (No need of a Subscription).
-
- W10 Clients Requirements:
- Build version 1903 or later required.
- An Internet Connection.
- Device can be AAD Joined or Hybrid AD Joined or AAD Registered.
- User Requirements:
- Universal Print License assigned to each user and to the Printer Administrator.
- Connector Requirement:
-
Windows 10 64-bit, version 1809 or later (Pro or Enterprise)
-
Windows Server 2016 64-bit or later (Windows Server 2019 64-bit or later is recommended)
-
NET Framework 4.7.2 or later.
- A continuous connection to the internet.
-
Access to the following endpoints: *.print.microsoft.com ; *.microsoftonline.com ; *.azure.com ; *.msftauth.net ; go.microsoft.com ; aka.ms
Reference: Installing the Universal Print connector | Microsoft Docs
-
STEP 1 - Assign Universal Print License to users
- Universal Print by default is included with business and educational Microsoft 365 and Windows 10 subscriptions, but you need to know that can also be purchased as a standalone license.
Subscription Type |
Universal Print |
Microsoft 365 Enterprise F3, E3, E5, A3, A5 |
Included |
Windows 10 Enterprise E3, E5, A3, A5 |
Included |
Microsoft 365 Business Premium |
Included |
Universal Print |
Standalone |
- In typical scenario the IT department can decide to create a Group or Dynamic Group to assign UP license to desired users in the company. To assign the UP (Universal Print) licenses you can use the Azure Portal or the Admin Portal or even the PowerShell.
From Azure portal ==> Azure Active Directory ==> Licenses ==> Select the desired licenses ==> Assign the Dynamic Group - Remember: you need to assign also the UP license also to the Printer Administrators.
STEP 2 - Install the UP Connector
Before we start this section, we need to answer to this questions:
- Why we need the connector? Because the customer do not have UP compatible printers but standard network printers.
- Were I need to place the connector? In this scenario the better place is the "Printer Server" because have the network visibility of the printers.
- I have a Linux Server can I install it on it? We ♥ Linux but some things need to done by Windows , so the answer is no.
Let's start with the deploy of the Universal Connector:
- Download the Universal Print connector from https://aka.ms/upconnector. (this is a direct download link)
- Install the connector on the "Printer Server":
- After the installation, we need to register the UP connector on Azure, and to do so we need a Global Admin or a Printer Administrator:
- Start the connector.
- Login with a Printer Administrator Credential in the tenant of the ITOpsTalk Corp.
- Insert a name for the connector and Register it on the Azure Tenant.
- Now if we go to the azure portal, and from the global search we type "Universal print" under the resource menu we can find the connectors menu and here we can see the connector just registered.
- Start the connector.
STEP 3 - Register the Printers
- After complete the connector registration, we need to register the printers on the cloud by selecting it from the connector interface:
NOTE: You need to keep in mind that the connector is able to register only the printers that are visible as a "local printers". - Here you can see that one printers is registered and other two are in-progress.
- After successfully complete the printer registration you need to remember to "Sign Out" from the connector but why?
The user account used to login in the connector, do not represent a service account used by the connector service visible in the Windows services, but will only be used to register the printers from the connector interface to the Azure tenant and managing it.
STEP 4 - Share the Printers
- After completing successfully the printer registration, from the Azure Portal we are able to see in the Universal Print service, the registered printers:
- Now we have two way to share the printers:
- Select multiple Printers and use the command "Share" to share immediately the printers with the same exact name of each printer and the same "Access Control" (this means the same users or groups that you will select will have access to the printers)
- Or you can click on a printer name and from the command bar use the "Share Printer":
In this way you can specify a different "Share Name" and specify different members for each printer share.
As you can see with this share name "ITOpsTalk CEO Printer" the financial consultant is able to identify really fast the CEO Printer, but also only the Finance Team is able to print using this printer.
- Select multiple Printers and use the command "Share" to share immediately the printers with the same exact name of each printer and the same "Access Control" (this means the same users or groups that you will select will have access to the printers)
STEP 5 - Add Printers on W10 Clients
- After the completion of the previous steps, what need to do the remote users to be able to search the cloud printers from the Windows 10?
- Open the Settings from the start menu.
- Search "Printers & Scanner".
- Click on "Add a Printer or scanner", and by doing this the client will start searching the printers on Azure.
- At the end of the research, the remote user (in this case our financial consultant) will be able to view all the cloud printers where the "Printer Administrator" have provided access to.
Other remote users that are not part of the "Finance Team" group in azure will not be able to view the "ITOpsTalk CEO Printer". - If the enterprise is very huge and the requested printer is not visible in the first list, each remote users can use the link "Search for Printers in my Organization"
In this way they can select a "search location" to research the required printers
Here you can see the Search location hierarchy:
This hierarchy is created by populating the "Location Properties" inside of the "Printer properties" from the Universal Print Service in the Azure portal. The hierarchy is in the following order:Country => Organization => Site => Building => Floor => Room
- And now you can research printers only available for example in the Rome Site.
- After the remote user (in this case our Financial consultant) have identified the correct printer, she need to use the Add Device button to install the printer:
- Now the printer is ready and the financial consultant can print from home directly to the printer located in the CEO Office in Rome.
At this point I want to emphasize the fact that Windows 10 clients from 1903 and above, do not need to install any specific printer drivers because natively support Universal Print. Specific printer drivers can be installed on the connector Server (In this case the Printer Server), but only if the printers are not UP compatible printers, so for example with standard network printers.
- Open the Settings from the start menu.
Conclusion
Remember, we love the Azure Portal to configure printers/shares or even the access control, but when we have a huge numbers of printers we love much more the PowerShell module dedicated to Universal print:
Install-Module UniversalPrintManagement
PowerShell Module - Universal Print | Microsoft Docs
In my honest opinion I think that the Universal Print represent something really powerful for the customers that want to simplify the printing infrastructure (especially if you have Universal Print enabled printers), also I think that we are only at the beginning of this journey our Product Group is working really hard to expand the functionality of this service, and to provide us feedback please look below in the Reference section.
I really hope with that this article, if you already have subscription that include the Universal Print license, you will start from tomorrow to try to deploy this great service in your environment, starting always from a pilot and then expand it to all your enterprise.
Enjoy the Universal Print and please don't have fear to ask me questions!
Official Reference
- Universal print official Documentation on Docs:
Universal Print | Microsoft Docs - Official Universal Print Public Blog to be updated on the new functionality:
Microsoft Tech Community - A great Universal Print interactive guide, made by our Product Group:
Universal Print Interactive Guide - Please help us and submit your ideas and watch what we are working on:
http://aka.ms/upideas