Microsoft WPP (Windows Protected Print) and the End of Third-Party Print Drivers

Microsoft Windows Protected Print Mode (WPP) is a new feature designed to address these potential risks while providing additional print security benefits. If you rely on network printing, here’s what you need to know about WPP and how it will impact your business.

What is Windows Protected Print (WPP)?

Microsoft Windows Protected Print Mode (WPP)  is a new security feature leveraging the modern Windows print stack and Internet Printing Protocol (IPP), eliminating the need for third-party print drivers. Through this shift, we can reduce vulnerabilities, simplifies printing experiences, and improves the overall security of Windows devices.

Why is Microsoft Implementing WPP?

Did you know that Microsoft reports that 9% of all security vulnerabilities are related to print drivers? Because printing requires deep access to the Windows operating system, attackers have exploited print drivers to install malicious code, leaving systems susceptible to malware, ransomware, and other cybersecurity threats.

WPP addresses these risks by:

• Running with lower privileges
• Eliminating third-party drivers
• Reducing the risk of SYSTEM-level access by attackers

For years, Microsoft has prioritized backward compatibility, but this has left Print Spoolers and other components open to security threats. Windows Protect Print Mode (WPP) is their answer to improving print security moving forward. 

How WPP Works: The Microsoft IPP Classless Driver

The IPP Driver allows Microsoft to enable basic printing without requiring manufacturer-specific drivers or additional utilities. While this improves security, it also means that some features—such as user codes, secure print, and advanced tray selections—won’t be available by default.

Since WPP relies on IPP (which is based on HTTP), it enables secure and reliable printing over a network without the need for traditional print drivers.

Challenges and Considerations with WPP

While WPP strengthens security, it also introduces some challenges that businesses need to address:

• Limited Features Without a Print Support App (PSA) – Without installing a PSA, users won’t have access to staple, hole punch, or tray selection options.
• Manufacturer-Specific Print Support Apps (PSAs) – Each printer manufacturer will develop its own PSA, which must be installed on each user’s workstation.
• PSA Deployment Methods:
  • Download from the Microsoft Store
  • Download directly from printer manufacturers
  • Deploy via IT management tools like Intune & Winget
    
• Impact on Print Queues:
  • Enabling WPP will delete all TCP/IP print queues with manufacturer drivers, even if WPP is later turned off.
  • Virtual drivers (e.g., PDF & fax printers) will also be removed.
  • IPP printers cannot be shared from a print server like traditional TCP/IP print queues.

How Can You Prepare For Windows Protected Print

Microsoft WPP represents a major shift in how Windows printing operates. While it enhances security, businesses must prepare for the changes it brings—especially around compatibility and feature limitations. Not all printers will support WPP. To ensure a smooth transition, businesses should take proactive steps now:

• Determine which printers are compatible with WPP (devices must support IPP and be Mopria certified).
• Assess how WPP will impact their current print environment.
• Develop a comprehensive print strategy to optimize their fleet.

Currently supported devices:

• Windows 11 24H2 (released October 1, 2024)
• Windows Server 2025

How UBEO Can Help Your Organization

UBEO is a leader in print management solutions and can help businesses navigate the transition to WPP with ease. Contact us today to get started with a Business Technology Assessment (BTA) and ensure your print infrastructure is ready for the future. Our solutions include:

• Cloud-Based Print Management – Eliminate the need for on-premises print servers.
• Driver Deployment with Full Finishing Options – Maintain access to essential printing features.
• Secure Follow-Me Printing – Print securely from any device within your network.
• Cloud Storage Integration – Seamlessly connect with OneDrive, SharePoint, Google Drive, and more.
• E-Fax Integration – Streamline digital faxing within your workflow.

Microsoft’s WPP Rollout Timeline

Last verified on 9.22.25  - Microsoft has outlined a phased approach to making WPP the default printing method:

• October 1, 2024 – WPP is released as an optional security feature for Windows 11 Pro.
• 2025 – Microsoft will stop accepting new third-party print driver submissions from manufacturers.
• January 15, 2026 - No new third-party drivers will be published to Windows Update for Windows 11+ and Windows Server 2025+. Existing print driver updates will be approved on a case-by-case basis.
• July 1, 2027 - Marks the end of third-party print driver updates, unless for a security-related fix. Existing third-party drivers can still be installed from Windows Update or manufacturer packages.