Intune Share PC (and similar configurations), AD / Papercut on Prem

[psydii]

Hi,

 

Hoping there is a neat solution after ignoring this for about five years....

 

We would like to setup a batch of new devices set up as Intune Shared PCs. User will log on with their AzureAD accounts (UPN being identical across AD and AAD sync'd using AzureAD Connect - so kerberos authentication should be available) and the users should be able to print to any Windows Printer shared from our print server (to which they have access).

 

We have done similar before but without the ability to print (an acceptable limitation at the time)

 

 

Now we need to print. Our print server in on prem and hosts Papercut (which we keep up to date).

 

We need to deploy the Windows Printers to these devices, and ideally allow the students to add a printer should they be using a device in a location where one of those three printers is not available. Students generally don't charge to an account, but as an extension exercise we would like to move to the same/similar config for staff where they *do* charge to various accounts. At the moment in AD/GP there is just one configuration applies to all staff and students, with some filtering on group membership around sensitive printers.

 

 

When we have had to issue Intune devices 1:1 and needed printing, we have had to set up mobility print and install (as admin, by hand) a special client on the laptops and have the user with us so they can enter their credentials to authenticate to papercut/print server at set up time. This is "fine"ish when its maybe a user a week, but wont scale to hundreds/thousands of users.

 

Any advice/links to how-to guide would be appreciated.

 

P.

[snagrat]

Hi,

 

Hoping there is a neat solution after ignoring this for about five years....

 

We would like to setup a batch of new devices set up as Intune Shared PCs. User will log on with their AzureAD accounts (UPN being identical across AD and AAD sync'd using AzureAD Connect - so kerberos authentication should be available) and the users should be able to print to any Windows Printer shared from our print server (to which they have access).

 

We have done similar before but without the ability to print (an acceptable limitation at the time)

 

 

Now we need to print. Our print server in on prem and hosts Papercut (which we keep up to date).

 

We need to deploy the Windows Printers to these devices, and ideally allow the students to add a printer should they be using a device in a location where one of those three printers is not available. Students generally don't charge to an account, but as an extension exercise we would like to move to the same/similar config for staff where they *do* charge to various accounts. At the moment in AD/GP there is just one configuration applies to all staff and students, with some filtering on group membership around sensitive printers.

 

 

When we have had to issue Intune devices 1:1 and needed printing, we have had to set up mobility print and install (as admin, by hand) a special client on the laptops and have the user with us so they can enter their credentials to authenticate to papercut/print server at set up time. This is "fine"ish when its maybe a user a week, but wont scale to hundreds/thousands of users.

 

Any advice/links to how-to guide would be appreciated.

 

P.

 

Not free but we use Printix to do this. Pay per Staff and Student are free but they are very relaxed on actual numbers.

 

Deploy the Printix client and that it is. The rest is done in the Printix console to set the print queues.

 

Works well with Papercut

[dsmith8]

We used PaperCut Print Deploy Client deployed to the PC's via inTune in then picks up their AD credentials and maps the printers to them. I think they also have a cloud client if you want them to print from home. How to deploy print queues using Microsoft Intune and Print Deploy | PaperCut

 

Azure AD Connect also works well for SSO stuff