Required Subscription

Either one of followings must be purchased:

• Any of the elligible Microsoft 365 subscriptions:
  • Microsoft 365 Enterprise F3, E3, E5, A3, A5
  • Windows 10 Enterprise E3, E5, A3, A5
  • Microsoft 365 Business Premium
  • Details: https://docs.microsoft.com/en-us/universal-print/fundamentals/universal-print-license#list-of-subscriptions-that-include-universal-print
  • Office 365 subscriptions are not eligible
• Universal Print standalone subscription

Universal Print standalone subscription

After purchasing, assign licenses to the target users.

Required License

• Universal Print Administrator
  • A license must be assigned to the Administrator
  • Print Administrator manages registered printers
    • Share printer to target user or group in Universal Print portal
    • Universal Print portal: a sub portal inside Azure portal
• Universal Print Printer user
  • A license must be assigned to the target user
  • Without license assigned, printers will not be visible to user even if printers are shared to target user/group

Required Virtual Machines and OS

A client device (either VM or PC)

• Windows client OS (i.e. Window 10), version 1903 or beyond
• Devices (VM/PC) with Window Server OS (i.e. Window Server 2019) CANNOT be used
• The client device (VM/PC) must be either of followings:
  • Azure AD Joined
  • Azure AD Registered
  • Azure AD Connected (synced from on-premise Active directory to Azure AD via Azure AD connect)

Assuming that the “Universal Print” connector will be installed in Azure VM and printers will be tested from Azure VM

• Connector VM
  • “Universal Print” connector will be installed in this VM
  • Azure AD joined VM (for RDPing to client VM with Azure AD credentials)
  • Either “Windows Server” (recommended) or “Window 10”
• Client VM
  • Printers will show up to this VM (after printers are shared -> printers will be added to this VM)
  • Printing test will be performed from this VM
  • Only Windows Client OS (i.e. Window 10, Window 11)

Links:

• https://docs.microsoft.com/en-us/azure/active-directory-domain-services/join-windows-vm
• https://docs.microsoft.com/en-us/azure/active-directory/devices/howto-vm-sign-in-azure-ad-windows

Required Roles

• Azure AD role:
  • For administrator: to configure and manage Universal Print Printers (already registered printer) in Universal Print portal, the administrator must be assigned either of the following Azure AD roles:
    • “Printer administrator”
    • “Global Administrator”
  • For users: to use “Universal Print” Printers do not require any special Azure AD role
• Azure role (when testing printers from client VM): either of the following roles must be assigned to the client Virtual Machine:
  • “Virtual Machine Administrator Login” role to the target Azure AD user or group
  • “Virtual Machine User Login” role to the target Azure AD user or group

Network requirements

To enable Azure AD authentication for your Windows VMs in Azure, you need to ensure your VMs network configuration permits outbound access to the following endpoints over TCP port 443:

• https://enterpriseregistration.windows.net
• https://login.microsoftonline.com
• https://device.login.microsoftonline.com
• https://pas.windows.net

Other requiremens

• Universal Print connector (for printers that does not support Universal Print natively):
  • https://aka.ms/UPConnector
  • Universal Print compatible printers can be used without connector
• Internet connection to the device (VM/PC) in which connector is installed
• Firewall exception rule if “Universal Print connector” is blocked due to on-premise firewall