How do I deregister / unregister a printer from Universal Print in Entra ID?

Overview

When a printer is registered in Microsoft Entra ID with an incorrect or non-standard name, it may fall outside the scope of scoped Administrative Units (AUs). This causes local Printer Administrators to lose management rights over the object in the Entra portal. This article provides the steps to force a deregistration directly from the printer's local interface, breaking the cloud bond without requiring Global Admin intervention.

Scope

This procedure applies generally across modern enterprise multifunction devices, such as Canon, HP, Lexmark, or Brother enterprise printers, utilizing native Universal Print firmware integration.

Procedure: Deregister via Canon Remote UI

Because the Entra ID cloud portal restricts access to the orphaned object, you must instruct the physical printer to tear down its own cloud registration from the device side.

  1. Access the Remote UI: Open a web browser on a computer connected to the same network as the printer and enter the printer's IP address.
  2. Log In: Log in as an Administrator using your System Manager ID and PIN/Password.
  3. Navigate to Network Settings:
    • On the portal home screen, click Settings/Registration on the right-hand side.
    • In the left-hand menu, expand Preferences and click Network.
  4. Locate Universal Print:
    • Scroll down the Network settings page until you locate the Universal Print Settings (or Settings for Universal Print) section.
    • Click Edit.
  5. Clear the Registration:
    • Look for the Universal Print status toggle or the Clear Registration / Unregister button within this sub-menu.
    • Set the status to Off or click Clear Registration.
    • Confirm any pop-up prompts warning you that cloud connectivity will be severed.
  6. Apply and Restart:
    • Click Save or OK to apply the changes.
    • Restart the physical printer (power cycle) to force it to drop the cloud registration token and update its status with Microsoft's APIs.

Procedure: Deregister via HP Embedded Web Server (EWS)

For Universal Print-ready HP FutureSmart devices, registration parameters can be dropped directly through the networking configuration console.

  1. Access the EWS: Open a web browser on the network and input the HP printer's IP address into the address field. Log in using your local Admin account credentials.
  2. Navigate to Settings: On the top navigation bar, click the Networking tab.
  3. Locate Universal Print: In the left-hand sidebar menu, select Microsoft Universal Print.
  4. Remove Registration Data:
    • Locate the setup overview field and click the Remove button.
    • Confirm the prompt choice to drop the cloud connection token.
  5. Restart: Power-cycle the printer to clean out local cache memory.

Procedure: Deregister via Lexmark Embedded Web Server (EWS)

For Universal Print-ready Lexmark devices, registration data can be cleared directly through the web console.

  1. Access the EWS: Open a web browser on the network and type the printer’s IP address into the address field.
  2. Navigate to Settings: On the side navigation panel, go to Settings > Network/Ports > Universal Print.
  3. Deregister the Device:
    • Locate the active Cloud Environment configuration tab (e.g., Commercial).
    • Click the Deregister button to sever the cloud connection link.
  4. Restart: Restart the device to ensure the local network settings apply cleanly.

Procedure: Deregister via Brother Web Based Management

For Universal Print-ready Brother enterprise devices, cloud registration links can be broken directly through the local protocol settings page.

  1. Access Management Console: Enter https://[printer-ip-address] into your web browser and log in with your administrator password.
  2. Navigate to Protocol Settings: Go to the navigation bar at the top and select Network > Protocol.
  3. Clear Registration Data:
    • Locate the Universal Print configuration entry and click its Advanced Settings link.
    • Click Unregister (or De-authorize Cloud Connect depending on firmware generation) and confirm the on-screen warnings.
  4. Power Cycle: Turn the printer off and back on to ensure the local firmware drops the current corporate tenant tokens.