Add Sign Request with airSlate SignNow

Add sign request

hello and welcome to another episode of intune.training the place to learn how to use microsoft intune the stephen adams show with ben the intern and jake the executive assistant how you doing you got it right hey guys hey hey so what are we talking about today uh i'm coming in cold you are you are um we're gonna talk about uh universal print um which kind of connects with intune uh but i'm not actually gonna use the endpoint portal at any point during this demo which is uh which is gonna be fun um has anyone here actually played around with universal print at all sweet i don't think it's not good for the environment yeah yeah it's terrible it's either that's why we do it universally absolutely everywhere around the world um okay so universal print the reason that i'm actually excited about universal print is that it is one of the last things that is difficult to actually uh achieve that full uh zero trust networking dream uh that the cloud management has sort of promised us um because up until now you still need to uh have your print server sitting you know on-prem somewhere connect it into all your printers and then you need to be able to share that and to do that you generally use an on-prem id it's just a pain so with universal print we can essentially host or offload the management of the of the print queue uh up into azure and then we can use uh aad as the authentication mechanism and the sort of the role based access to the printers so it's really good um so sorry chat messages i'm gonna hide that all right so we're gonna go through how to set up absolutely from not having anything at all uh to printing a uh to printing something on a printer that's sitting in another uh area that is because i don't have a printer and i never will um so the first thing we need to do is we need to talk about licensing yeah we do let me just share my screen all right so what we're going to do is i'm going to pop into the admin.microsoft.com now we've actually already gone through and we've set up the license just because it can take a little while to actually apply the important thing to know is that at the moment uh universal print is in public preview uh which means it's it's not generally available [Music] but that means that there are there are limitations on whether you can sort of get access to this or not i'm i always forget what the key requirements are steve at a very high level you need to have a sku that you're paying for that is m365 e3 e5 uh i think in 365. m365 yes yes correct and or business premium as well there's actually so he's he's a he's a page i've brought up earlier uh already so this gives you every bit of information that you need to it's it's kind of dated um it's talking about how to access the public preview you don't need to apply anymore but this will give you the skew that you need uh to sort of go in and um to get the license but for now just know that we've got uh the the necessary license to have to be eligible to apply for it so probably the important thing to call out is you need to be it needs to be a skew that you're paying actual money for yes that is correct um they put a specific delineation on making sure that uh people who are paying real human money uh for the product get access to support um so during the public preview and even the private preview earlier um the point was that they really wanted people uh to to get the support while they were you know sort of going through the teething process um and the best way that they could uh do that is by going well if you're paying for it then we'll give you the support um which which makes sense to me um so you can see here we've got the universal print uh license applied to us um we have three hundred thousand available licenses which is basically just a an arbitrary number saying that we can use an relatively infinite amount of licenses the key thing to know is that every single person who will be printing or have access to a printer that is shared using universal print needs to have this license applied so it's very similar to your e3 or e5 or whatever like you you just need to have it so that you can get access to the tools which again also makes sense um cool so we know we've got the last thing that i just want to call out then um because it's going to catch some people out is it's an add-on license it's not a pure license so what you need to do to get the license is you need to go to your products once you have a button that i don't have uh once you have the m365e5 license there which is for a third from the top there been yep uh and then you can go in here and select add-ons and that's an add-on license i may not have the uh ability to do that yep so then down in the middle of the bottom there is the add-on bring more value and find more add-ons in purchase services so there's text there and then this gives you the ability to see the add-ons and you'll see down the bottom there's the universal print trial so this is the reason why i'm calling this out is because it's slightly different than how you would traditionally add a license to your subscription so you might sit there and go i don't have it typically you will have it there but some excuse it may just come up and say you're not eligible for this uh truck that's right exactly um cool so licensing conversation done um you need to there's certain things you need to be able to be eligible for the add-on once you've got the add-on um you just need to assign it to users so that's what we're now going to do so i'm going to pop back over to zoom it in a little bit i can do that thank you sweet so i'm going to i've gone to portal.azure.com you go into azure active directory and i'm going to create a group for our uh for our licenses normally i guess you could probably do this to your baseline group because you know everyone that needs access to the printer needs it but for this scenario let's just create a new one and we'll just go in here i'm gonna manually do this why do i not see because it's got users and computers that and i'm zoomed in so much that i can't see anything we'll create that group and we'll just go into licenses why do i not have access to this there we go and i'm just going to select universal print yeah i think that's done and we can see it's there enable services and we'll go into members now again with all things in azure um this may take a little while to apply um something that we just found out uh pre-pre-recording uh but basically now that any any user in this group is going to get that license so we don't need to think about uh manually assigning it to each person which is pretty cool i know we've talked about it before it is the way to assign licenses instead of doing it manually cool so once we've done that um we then need to set up our administrator roles um so at the moment we all have access now to if we had a printer set up correctly we could search for it and find it in print uh but to actually manage the cues and set everything up you need to be set up as an administrator or a print admin so we'll just go back to home azure active directory roles and administrators search for print so we have printer administrator and printed technician you technicians have almost all of the uh access that administrators do um there's just a couple of things uh administrators can uh create new printers uh and and do all sort of stuff technicians can only modify existing things that are there so for now we're just going to give give a couple of people admin access let's give this a sec and obviously this can be done via pin but if for our demo we're just going to go straight through and do it as a yes yeah admins for everybody and we're gonna make it active and permanently assigned answer justification so we can print things at adam's house wait what yeah we probably should have told you adam uh you're the one with the printer right i think everybody except for you [Laughter] hey listen i'm just leaning into that data loss prevention uh mantra that you've uh built into me all these years printing is is an insecure form of data delivery yes but but according to the medical industry faxing is just perfectly secure it's the only way it's the only way and toner is expensive oh yeah it is but i don't have to pay for it the only thing i've ever seen on the fax machine at our office was is just like these ads for you know cruise lines or something not your car's extended warranty exactly all right cool so those only show up on the pager all right so we've got all the users now in our admin group we can just verify that by going in to the actual user just look at adams first we'll check his license we've got universal print assigned roles print admin and global admin now the important thing to note uh is that if you have ga you don't need printer administrator either um ga gives you what you need but this is important to note because anyone that's maintaining or managing print queues probably doesn't need to be a ga or probably isn't a ga or alternatively if you're following the correct security practices you should be having this with pim and if you need to do work on your printers you just lift up pim on your account and then you're good to go uh print admin rather yes most people just go global admin if they've got it because then i don't have to worry about it if i need to do something else that's that's exactly what i do it gives me gives me all the gives me all the keys uh okay so we've we've set everything up that's you know that that took a second um what we now need to do is we now need to get uh the printer on adam's uh in adam's house uh connected up to azure um and we do that by going to you know you guys can't fly right now yeah no i know um so i just figured i'd download some software and pretend that i'm in your house um all right i'd be concerned at letting him into your house too yeah and so would i hang it out there uh adam i need you to share your screen please because you will be driving i feel like this is the first step for you to get in the door here it is yes sir okay unlock all your winners it's a series of tubes okay it's a single box with a red button on the top give me a second i can't figure out where the share button is all right share the top right next to the green one adam's doing this cut them oh i'm assuming i'm going to portal.azure.com uh just search for uh universal print yep and uh on the main screen that you're on there uh just go to download connector jackpot and the installer link yep yep nice and easy to see on the docs page oh wait aka dot ms slash up connector msi and then look at the files that are just downloaded yeah yeah it's an axi it's not an msi that's the best thing about it wow genius okay so here we go i'm gonna install this so wait i'm assuming that the machine that you're on right now is the machine that you have your printer connected to that's true yes sir cool so just to clarify what we're doing here uh you still need some kind of device to uh to install the printer or have the print queue uh mapped onto the machine so with the driver and all sorts of fun stuff what it what it does mean is that yes you still need some kind of device whether that's a virtual machine on-prem or somewhere that has direct line of sight to the printer um it doesn't need to be a managed device it just needs to be a device so for instance this is my personal laptop that i've logged into with my just my microsoft user account it is not in tune managed or joined or anything and it is on my home network it is not in any way connected to vpn or uh in tune in any way um correct so it is just a device that's going to have this connector that has it is on the internet and it has a printer connected to it yeah that's it that's right so basically what we're doing here is we're installing the connector uh and this is going to be very similar to the uh the adapt proxy or the intune connector that we've set up in previous demos it's literally just creating a tunnel uh from your device to azure so that we can then uh pass secure print jobs and there are a very few number of printers that do support this natively to where you don't need the connector but it is they're very few and far between right now yeah and that's pretty much brand spanking new yeah so if you're buying new printers it's something to check to make sure it's supported yeah even if you don't use it today it may be something you'll use in the future yep so we're just gonna hit launch and so what this really means is you can close down your business office get rid of all your servers get rid of all your uh business network and then just set up a computer in your closet at home and hook up all your printer print uh printers in there and you should be good to go that's it yes uh so just log in uh and log in yeah yeah yeah so yeah again the key thing here is that you either need to be a ga or you need to have uh that print admin role assigned to your the account that you're logging into um it doesn't use your account it just uses your account uh to to create the connection yeah exactly yeah it's not caching my credentials in to this it's used to get there to then create the connection that's right so down the bottom which i don't know i think you'll find under the hood it's creating a managed service account that allows it to do that connection constantly and we'll just reach that connector so some fun trivia about this awesome printer i've got it is an hp laserjet 1022 black and white printer that i purchased in 2007 for my wife when she was going just back to school and uh it's still kicking and i think i've only maybe maybe on my third toner but like a thousand reams of paper right it is insane and honestly i remember rolling those out to another company they don't make them like they used to it's bulletproof man it's not wireless which is annoying it's not wireless yeah so i mean this is a this is a good example adam that the printer doesn't have to be new the printer itself just needs to be installed on the machine we have the connector um it should almost always work you could use one of the old hp laserjet 5ps yeah you can just snag it you can print to my snagit printer correct why not uh let's okay we will well let's let's do that yeah exactly so you can see here we've got a couple of different uh options automatically collect diagnostics install updates uh enable hybrid ad configuration which you know we don't know the fibre d so it's all good uh so it's just gonna make those connections now shouldn't take too long it's basically just getting the driver set and analyzing what it can and can't do with that printer wow it added snagit real quick yeah yeah yeah which i can actually see value in this because essentially what it's going to do is it's just going to save like a pdf somewhere right oh yeah i don't 100 know how that would work but that would be a really good use case uh to have zero trust pdf creation i feel like by the way sorry i would i would zoom in on this but i don't have zoom it on my i already had to redo this computer so sorry um i don't i wouldn't worry if that opens up a browse window on that person yeah yes okay we'll just let's just see what happens um all right so we've got those things i'm gonna take the screen off you why why don't you talk adam through sure yeah we can do that i'll take it when i've got because i've got the client machine but uh adam could do the rest uh all right so close the connector down uh well hang on let's sign out so so yeah so we talked about it creating a connector but then i was just noticing this so do should i no so you don't want to sign out but when you close the connector the service maintained that connection so next time you open the connector ui you might need to sign in it's it's very similar to the engine connector or the uh the aed app proxy so okay so the way i'm understanding it is that i don't need to be signed in for the tunnel to work or the connector to function properly but i do need to be signed in to manage the connection that's correct so you're doing the administration work right now yeah administration and then the print technician coming in and just going i need to register this printer that's right okay okay cool so let's close that down get rid of the settings and go back to the portal all right so now if we go into printers we should see uh two printers there so we got hewlett packard and snagit now you can see in the middle there we've got the two things are saying not shared sorry that's okay try again cool so both of those are not so we've got the printers registered and actually if you go into connectors down there we'll just show you what we've got so we're actually going to have an extra one that steve and i were playing around with earlier this week but you can see adam's house printer and it's just got a little bit of metadata around what that is a little bit of info on what the machine is that it's the connectors on so we can see it's on windows 10 pro that's another key thing you don't need server operating system for this it just needs to be windows 10 or higher um so that's pretty good the name of the machine is the beast which is great okay so let's go back to the universal print and we'll create those shares you've seen um um the sandlot right yes i have yes it's good movie all right so let's share that printer uh so we've got by default the option to allow access to everyone in my org which is kind of like saying all users and all devices uh steve why is that a bad idea i don't care so if you've invited people from outside your tenant they're going to be in this list as well so if you scroll down as an example you're seeing here a few people that we've worked with previously come up in the list um hey looks like groups are there now groups are there now this is really good so when we when we did this on wednesday for a user group uh set groups weren't available so what this means is that we don't have to specify just as you know just each user at a time we can actually go and find that uh that universal print group that i created and just assign it to that and then it's just going to be us4 that have access to this printer might as well just share this one too and all of a sudden the printer in adam's house suddenly starts printing and checking pages so is this uh yes that is the that is the uh the spn or the managed uh service provider that is uh that has been created to sort of handle that link but is that my connectors yes that is your connector that is my okay yeah all right so let's pop into of shares and we'll just see what we've just done there cool so we've got those two uh and we've we've so we specifically just to note when you created that share you assigned to the same security group what you could do is that say you only wanted certain people to have access to the snag connector you could do it there so that you could actually uh ring fence you know who had access to what so if you had printers on different floors or for different departments that's where you would control that uh that flow of printing so the important thing to note at the moment you don't have the ability to do what you can do today where you can say i'm going to create a print queue for color and a print queue for black and white to the same printer and have different scopes that doesn't exist yeah it's a little bit tricky so again uh to reiterate and i'll say this a couple more times uh this is all in public preview which means it's in heavy development um so there are avenues for feature requests and things like that there are bugs with it um but you know it's it's getting there and right now if you just need a simple way to print without having an on-prem id this works um okay so we've now set up the entire infrastructure for to be able to print using cloud printing or universal printing um we enabled this the other day um adam document conversion basically allows us to convert from xps to pdf i believe yes but i haven't really done a lot with it i think it's more programmatic because you can actually access a lot of the functionality of universal print through the graph api which means that you can you know create applications that that will print on behalf of you or generate um you know pdf files i'm using this functionality so it's pretty cool um all right so i have a computer so this is just a client machine that is enrolled to intune training um i don't have anything installed i've got a bunch of updates that need to go through which is great it wouldn't be out one of our devices if it didn't have a whole heap of updates exactly so i'm just so right now just to show everyone what the experience is without doing anything further so this is a brand new version of windows 10 um 20h2 december version i believe um i haven't installed any drivers i haven't uh done anything else it's just a brand new machine that i provisioned like two days ago so then what's the minimum os requirements to use clapper do you know 19 or higher windows 10 19 or higher i believe 1909 i believe yeah the higher version that you get um so basically anything in the 20 versions um has the universal print driver automatically installed in it which means we can do what we're about to do which is going to printers i'm going to add a print or scanner i'm going to search and i should see two printers come up which i can so i can see hewlett packard and snagit and i just i just go yep i want to use this one i'm going to add it that alone it to me is just amazing so i haven't installed anything on this machine to get this i've simply spent five to ten minutes configuring the back end and i've now got access to a printer that is you know in another country that i can then go in and maybe i've got something oh look at this what's this and i'm going to go to this and i'm going to go print and if i'm fast enough i should be able to see i hear it yeah set away [Music] sounds like a vacuum cleaner's going off there congratulations you've successfully subscribed to yeah at least unsubscribe to cancel your subscription oh my god i don't have a fax machine i don't know what i'm supposed to do with this oh that is so good no but here's the this is just teasing adam that was a really good bit i'm glad you did that [Laughter] um cool so now that now we can see here uh we've got the job that i just printed to adam's machine we can see it's completed um and we can go in and we can do some cool stuff what i want to do is i wanna that example that we did uh earlier steve where we paused the print queue or the spooler service um so adam can you drive again for me yeah and adam we've lost your video yeah oh i could remediate that i was working up a document here okay yeah perfect uh okay so uh steve you're gonna have to explain how to do this did we go into services or you just went into so we just went to the printer itself so we select the printer go to manage um actually sorry go yeah yeah you need to do that somewhere else you need to do it as an admin open prequeue yeah so open print key there okay yeah open queue and then there you go printer um and because you're running as administrator there you can go and pause but if it's a aad joined device it will come up and i'll actually say run as administrator so you can pause it yeah yeah so just pause that for me okay so what i want to do here is i just want to show you the current uh one of the current sort of it's not a bug it's a byproduct of how it currently works um and and i'll explain why this is a problem in a second um so i'm just gonna print that again the exact same thing and if we give that a second we should see it pop up on the queue hopefully there it is so i printed that as myself as ben at intune.training now you can see the owner is system that's a problem because what that means is that at some point during the uh the process of handing off the job it's stripping away who's actually sent the the print job and is replacing it with system now it's doing it on this machine so when the job hits uh the azure portal and it hits the print queues and then it goes through the connector at the connector point the connector is taking that request and saying yeah that's fine i'll do it on behalf of you and the the connector is running a system so the connector then basically re-re-passes the job to the print queue as system now why is that a massive problem uh essentially at this point in time it means that we now no longer have any functionality to use follow me print or secure printing so any of that sort of you know type in a pin to get access to your print queues and stuff like that none of that's going to work because the print job is going to that printer as system and not as me um on your side does your print queue show it paused as well uh you see the print queue from your side check check on your and go into the portal what do you mean on the actual client on your client machine that you just printed from yes which is attention required so if ben you want to share yeah yeah i'm doing that now screen two yeah so i can see it's uh so you own it here yeah because remember the connector is running a system right yep so all the way from my machine to azure to your computer it's it's being sent through as me it hits the connector and then goes to the printer it switches over the system how connected the queue your your view of the queue was compared to my view because you've clearly got and it's it's sending the status back to your queue from my queue you know so yeah yeah so then in the settings pane if you go to manage you'll see that it says one document in queue so if i bring it up on my computer it's gonna it actually says attention required all right that's interesting there you go so yeah i mean that's that's currently a problem um and if we'll put it we'll put a link to the uh the feature request page for universal print that's currently the top most requested feature the ability to use follow me print and secure print um because you know without it it's it's kind of it's it's stopping a lot of functionality and a lot of a lot of people sort of onboarding this is there as their primary solution however if all you need is a way to securely send uh print jobs from uh your devices anywhere in the world uh in a secure fashion right now we've got that set up in less than 10 minutes um so there is there is still quite a lot uh of work to be done to really sort of polish this uh solution um but you know it's it's pretty good for what we've got right now it's a starting point so before you get off of that machine ben yep yep um do the uh do the snagit printer i'd like to see what happens with it yeah have to have a look in your queue adam i'm oh you've already you've you guys have already stacked me up error how's it bringing up that browse window no this is error error printing do you want to show yourself in there yeah have you just been sitting there just like spamming the the prince no surprisingly no um i only sent one but the best thing about it is because it runs a system don't know who did it exactly yeah um but but okay on that note uh if you go to the portal and look at the you can see it from there so yes potentially there's a there's an issue there but i'm sure there's like an id that matches up um so adam if you go back to the print queue for me i know once you've done all this and it's not there you want to be it's under printers so remember you're always going to have a printer and a printer and then you want to go is actually stopped yes let's see which is interesting that's because there's an error i'd say and then go jobs you'll be able to see that it was created by me and it's been imported if you go back to the snagit queue on your pc there though adam and right click and restart does it actually pop up and pop the ui okay so go back to go back to the um the portal and just refresh that no but it's not taking this one thinks it's working here yeah but that's okay we you know snag it would be cool to set snag it up if you actually go into um the printer properties of the snag in in portal should be curious to see what going to print printed defaults and also this is where you can set it to color black and white yeah you can also set the page size from uh yeah to the letter conventional a4 yeah none of us want to deal with very interesting yeah so okay so what we've what we've done there is is sort of the minimum process to get a printer available most people would then obviously want to go through and automatically force those printers to install onto onto their client machines which is entirely possible um there's there's a document available a get started document on the docs.microsoft.com that explains their process to do it i have a similar process that's a little more polished but basically the process at the moment involves installing a a service that sits and looks at a csv file on the machine and this isn't mine this is the official solution uh it looks at a csv list of all the printers that uh that you want to be made available to those machines and it will then utilize uh a print api process to try and map that for you on behalf of um and it works really really well um i just if i would be preferring if i was in charge of setting this up for a client i would be erroring more on the side of educating the users to be able to search for a printer instead of instead of managing the deployment of printers for them i would simply be like they're all available or the ones that you're allowed to have available are there just go in and you know search for it once then it should be good and and this comes back to pushing that self-service ethos to your end users but on top of that probably the biggest story around this one is we don't want people printing stuff from an environmental point of view from a dlp point of view from all of these different scenarios printing is not a good thing so if we just say well go and self-service it odds on most most staff won't actually do it don't just sit there and go oh well i don't know yeah i don't miss not having a printer but if it's easy they'll just print exactly um the other key thing just to talk about quickly about universal print before we wrap up is that so this this works for us right we can set up a print queue and we can share it and make it available for our end users um and that that's one use case for this the other use case of universal print as a technology is actually to empower and enable uh print event like hardware and software vendors to actually utilize the apis that microsoft have created uh into their products so we might be one target audience to sort of manage the print queues and allow our end users to print but i believe the real benefit here is the hardware and software vendors that will be able to utilize this functionality into their products so that we don't have to so it's just natively you plug it in and it's ready to go you set up a couple of connection points and then you know then you can just share printers um so i'm quite interested to see uh what happens in the future with i i already know that there's hardware vendors that are implementing this right now but as steve said at the start it's you need a pretty brand new printer for this stuff to really exist um so i'm curious and positive that we'll get some interesting results in the near future definitely um and guys i i clicked on the usage reports usage and reports and their csv files and they don't have any data in them but i don't know if that's a not turned on yet or it's a needs time to process yes it needs time to process if you want i can just keep sending jobs through well because you guys did some of this stuff the other day and there's no usage data in for that either yeah yeah it makes me wonder there's probably a limitation on how many print jobs need to come through before it starts registering that stuff and or it's a period of 30 days is more likely yeah and i mean this morning i went through and deleted the the printer and um print share that we set up um for the previous demo so it could be due to that as well okay fair enough sweet i think it's pretty simple yeah awesome cool well uh i think that's it yeah i got nothing man you guys good all right awesome all right hit us up on the socials so yeah we'll put all the links everywhere i can't quit talking i'm cutting all this [Laughter]