Create a Universal Print policy in Microsoft Intune

Many organizations are moving their printer infrastructure to the cloud. Universal Print is a cloud-based printing solution in Microsoft 365. It uses built-in cloud printers, built-in legacy printers, and runs entirely in Microsoft Azure.

When you deploy Universal Print with Universal Print-compatible printers, it doesn't require any on-premises infrastructure. For a guided simulation, see Universal Print guided simulation.

By using the settings catalog in Intune, you can create a printer policy and deploy the policy to your managed users and devices. Then, on their devices, end users select the printer from a list of registered Universal Print printers to print. These settings use the UniversalPrint CSP.

This feature applies to:

• Windows

This article shows you how to create a Universal Print policy in Microsoft Intune. To learn more about Universal Print and onboarding, see What is Universal Print and Set up Universal Print.

Prerequisites

Create the policy

This policy includes your printer information. When you assign the policy, the printers are automatically installed. Then, on their devices, users select a printer that you added.

1. Sign in to the Microsoft Intune admin center.

2. Select Devices > Manage devices > Configuration > Create > New policy.

3. Enter the following properties:

   • Platform: Select Windows 10 and later.
   • Profile type: Select Settings catalog.

4. Select Create.

5. In Basics, enter the following properties:

   • Name: Enter a descriptive name for the profile. Name your profiles so you can easily identify them later. For example, a good profile name is Win11: Universal Print policy.
   • Description: Enter a description for the profile. This setting is optional, but recommended.

6. Select Next.

7. In Configuration settings, select Add settings. In the settings picker, select Printer Provisioning, and select the settings you want to configure.

   

   Close the settings picker.

8. Configure the settings:

   • Action: Select Install to install a printer. When users receive the policy, the printer automatically installs.
   • Cloud Device ID: Enter the printer ID. This ID is created when the printer is registered in Microsoft Entra ID using the Universal Print service. To get the ID, use the Universal Print portal.
   • Printer Shared ID: Enter the Shared ID of the printer. To get the ID, use the Universal Print portal.
   • Printer Shared Name: Enter the Shared Name of the printer. To get the name, use the Universal Print portal.

   You can add more printers using the Add button:

   

9. Select Next.

10. In Scope tags (optional), assign a tag to filter the profile to specific IT groups. For more information about scope tags, see Use RBAC roles and scope tags for distributed IT.

    Select Next.

11. In Assignments, select the users that will receive your profile.

    These user accounts need access rights to the printer and the Universal Print service. If the profile is assigned to a Microsoft Entra user or user group that can't access the printers because of permissions, Intune grants the assigned user or user group the permissions.

    If users don't have permissions, the following message is shown:

    The selected groups may not have Universal Print permissions to selected printers. If this is the case, Intune will provide these groups with the correct permissions.

    For more information on assigning profiles in Intune, go to Assign user and device profiles. For more information on user scope vs. device scope in the settings catalog, go to Use the settings catalog to configure settings: Device scope vs. user scope settings.

    Select Next.

12. In Review + create, review your settings. When you select Create, your changes are saved, and the profile is assigned. The policy is also shown in the profiles list.

Failures and reporting

After you assign the profile, you can monitor its status. The Intune reports show if a profile is successfully applied, failed, has conflicts, and more. For more specific information, see Monitor device configuration profiles in Microsoft Intune.

For information on the reporting data you can view, see Intune reports.

Common issues

• When you deploy the printer policy, you might get a Error 0x8007007f (ERROR_PROC_NOT_FOUND) message.

  The ERROR_PROC_NOT_FOUND error is common, and is typically associated with missing DelayLoaded DLLs or missing APIs.

  To resolve this error, make sure your Windows OS client version is supported. The supported versions are listed at the top of this article.

• If you remove a printer from the Universal Print service, unshare it, or remove permissions, the Intune policy fails to install the printer.

• Make sure the printer is discoverable on the device. If users can't discover or install the printer manually, the Intune policy also fails to install the printer.

• Make sure you enter the SharedID and PrinterID correctly in the Intune policy.

  In some cases, the PrinterID and SharedID are reversed, which prevents the printer from being discovered. For more information on these settings, see Create the policy (in this article).

• The Application event log can show errors related to Universal Print.

Enable tracing for Universal Print issues

If the common issues (in this article) don't resolve your issue, you can use Fiddler tracing, the Print-Collect script, and UPPrinterInstaller.exe to resync the Intune installation of the universal printer. You can review these logs for possible issues. You can also work with the Intune support team to review and analyze these logs.

For more information and specific steps, see Universal Print troubleshooting guide - Use PrintCollect, Fiddler, and UPPrinterInstaller.

Related articles

• What is Universal Print
• Use the settings catalog to configure settings on Windows and macOS devices