Deploying PaperCut managed printers via Intune

[woreilly]

Afternoon folks,

 

Apologies if this has been covered on this forum before.

 

Has anyone found a reliable way of deploying printers that are managed by PaperCut via Intune?

 

I am certainly struggling - it is the one thing stopping me pushing more devices onto Intune.

 

I've registered one of of PaperCut printers - a virtual 'follow me' queue with Universal print and deployed the CSV file (packaged into the .intunewin package) and Universal Print Printer Provisioning apps. According to the device/user install status, it has had decidedly mixed results. The device I have been testing on gives me the pop-up to say it is downloading the packages but then ultimately fails to install.

 

I've tried deploying the printer via PowerShell as per https://powers-hell.com/2020/04/25/installing-printers-with-intune-powershell/ but that has failed also.

 

Mobility Print has also been unreliable as our staff normally operate by selecting a shared account from the papercut client popup.

[EssentialRug]

Afternoon folks,

 

Apologies if this has been covered on this forum before.

 

Has anyone found a reliable way of deploying printers that are managed by PaperCut via Intune?

 

I am certainly struggling - it is the one thing stopping me pushing more devices onto Intune.

 

I've registered one of of PaperCut printers - a virtual 'follow me' queue with Universal print and deployed the CSV file (packaged into the .intunewin package) and Universal Print Printer Provisioning apps. According to the device/user install status, it has had decidedly mixed results. The device I have been testing on gives me the pop-up to say it is downloading the packages but then ultimately fails to install.

 

I've tried deploying the printer via PowerShell as per https://powers-hell.com/2020/04/25/installing-printers-with-intune-powershell/ but that has failed also.

 

Mobility Print has also been unreliable as our staff normally operate by selecting a shared account from the papercut client popup.

 

Which version of PaperCut are you running? We use Print Deploy to push our printers out via Intune and has been working great for us. I take it this is what you have been doing but it is failing to install?

[DalekSec]

We use print deploy with Intune, universal print requires us to pretty much redo all our users in Papercut! As currently synced from AD not Azure AD, One for the summer...

 

With mobility print, you can set it so they select the shared account on the printer if they are using a MFP, obviously doesn't work on desk based ones!

[snagrat]

Does Print Deploy auto sign in the user?

[EssentialRug]

Does Print Deploy auto sign in the user?

 

It depends on how you are handling PaperCut identity management. If your users are syncing with Azure AD then yes Print Deploy can auto sign your users in at login.

[alanmorris]

@woreilly I have no guidance with regard to deploying a UP printer using Intune.

 

The requirement for account selection will be challenge and will work best when you have printers that support account selection on the device. This configuration works for Mobility Printers as well.

 

With Universal Print, the clients can print from anywhere. We do not retain any IP address data since this can be Starbucks and not relevant to the local users.

 

The new default from Microsoft when adding a connection to a Windows shared printer is that the client user MUST be local administrator or have administrative credentials to install the software from the print server. This is now a Microsoft default. It is configurable if you have solid control of the software you added to the print server. You know this as a print driver.

 

For decades, the Windows print server has acted as a software distribution center with policies to notify the users that they were downloading software to their systems. As you point out with the guidance to install connections using PowerShell, turning OFF all that protection is the driving factor in the new administrative default from Microsoft.

 

You can allow user access to installing all that software, Microsoft publishes the registry setting for this configuration, if that is the way you would rather go. PaperCut links to the Microsoft configurations on our Known Issues page if you wanted to review our thoughts on the topic. Here is the MS information we link to. https://support.microsoft.com/en-gb/topic/kb5005652-manage-new-point-and-print-default-driver-installation-behavior-cve-2021-34481-873642bf-2634-49c5-a23b-6d8e9a302872

 

Thanks

[HereIGoAgain2601]

We are using Print deploy for our devices - they are all intune managed and aside from MF we have no on premise servers.

 

Be interested to know how you got the SSO working - never quite cracked this but works fine when the user logs on manually with azure ad credentials. I’ve seen they have updated the Azure and papercut integration in a recent version of MF so maybe upgrading to this will help.

[titch]

Is print deploy the same as universal print?

[alanmorris]

No, PaperCut Print Deploy is not the same as Microsoft's Universal Print.

 

PaperCut Print Deploy is used to install local printers on client systems as well as printers which send files to PaperCut Mobility Print.

 

Mobility Print is the PaperCut feature to use when you get tired of dealing with the new default requirements from Microsoft and decide to dump Windows Point and Print

[DangerousDaveUK]

We use intune to push out a vbscript into the common startup folder to add the Papercut follow me printer(s) to the device. Same for mapping network drives, etc.