Windows Protected Print Mode: How to Set It Up Safely

Windows protected print mode is a Windows 11 printer setting that changes how your PC prints. With it on, Windows stops using printer makers’ drivers and prints only through Windows Ready Print, the printing system built into Windows. Microsoft recommends it for security and because it removes driver management, but switching it on also removes some printers until you add them back. This guide shows how to check compatibility first, how to set it up and turn it off, and what to do about printers it removes.

What Windows protected print mode does

Most printers have traditionally needed a driver from the maker: software that runs inside the Windows print system. Third-party drivers have been a long-running source of security problems and installation headaches. Microsoft describes Windows protected print mode as a way to improve PC security and eliminate driver issues: it prevents the installation of third-party drivers and enables extra protections in the print spooler. In its enterprise documentation, Microsoft says the mode mitigates over half of past reported security issues for Windows print.

Instead of a maker’s driver, the PC uses Windows Ready Print, which talks to printers using the Mopria standard. Makers can still offer extra features through Print Support Apps, small companion apps from the Microsoft Store, rather than full drivers.

Will my printer work?

Microsoft says the mode is designed for Mopria certified printers, and that most new printers and over 120 million printers already sold are certified. Two ways to check:

• In Windows: open Start, Settings, Bluetooth & devices, Printers & scanners. Compatible printers show a small shield icon.
• On the Mopria site: search the Mopria certified products list for your exact model.

Scanners need a separate check. Microsoft notes that some compatible devices’ scanners are unavailable in protected print mode; if the scanner is not Mopria certified, only printing works. If you rely on a multifunction printer for scanning, confirm this before switching. Our printer scanner setup guide covers scanning in general.

Printers that are not certified, typically older or specialised models that only work with the maker’s driver, will not work while the mode is on.

Before you turn it on

Make a quick list, because some things are removed:

• Printers without the shield icon. Microsoft says printers using third-party drivers are uninstalled and their drivers are deleted from the driver store while the mode is active.
• Software printers. Turning the mode on uninstalls unsupported software printers, including “OneNote (Desktop)”. Microsoft says a replacement, “OneNote (Desktop) – Protected virtual printer”, comes with recent OneNote versions on recent Windows 11 builds.
• XPS and fax. Microsoft XPS Document Writer and fax are removed.
• Printer IP addresses. For network printers you may need to add back, note their addresses; our guide to finding a printer’s IP address shows where to look.

You also need an administrator account.

How to turn on Windows protected print mode

Microsoft’s steps:

1. Select Start and open Settings, Bluetooth & devices, Printers & scanners.
2. Check each installed printer for the compatible icon.
3. Scroll down to Printer preferences. Under Windows protected print mode, select Set up.
4. Select Yes, continue for every prompt. The Set up dialog lists printers that need to be reinstalled.
5. Reinstall any compatible printers that were removed.

To add a printer back, use Add device on the same page, or follow our step-by-step guide to adding a printer in Windows 11. A Mopria certified printer that was originally installed with the maker’s driver comes back using Windows Ready Print instead.

How to turn it off

1. Open Settings, Bluetooth & devices, Printers & scanners.
2. Scroll to Printer preferences and, under Windows protected print mode, select Turn off.
3. Select Yes.

You can then install printers that need the maker’s driver again; see our Windows 11 printer driver guide. Microsoft notes that printers added while the mode was on keep using Windows Ready Print unless you remove them and add them again with the mode off. Our guide to removing a printer in Windows 11 covers that step.

To get XPS and fax back after turning the mode off, Microsoft lists two routes: search Start for Windows Features and tick Microsoft XPS Document Writer, and for fax open Settings, System, Optional features and add Windows Fax and Scan.

On work and school PCs

Organisations can enforce the mode. Microsoft’s enterprise guide uses the Local Group Policy Editor: Computer Configuration, Administrative Templates, Printers, then Configure Windows protected print, set to Enabled. Intune has a matching policy. If the mode is enabled by policy, Microsoft says you cannot turn it off without contacting your administrator, so on a managed PC ask your IT team rather than looking for workarounds.

Should you turn it on?

Your situation	Suggestion
All your printers show the shield icon	Turn it on; nothing you use is lost
You print to OneNote, XPS or fax	Check the replacements first, or wait
An older printer only works with the maker’s driver	Leave it off for now, or plan to replace that printer
Multifunction printer used for scanning	Check the scanner model on the Mopria list first
Work PC	Follow your IT team’s policy

After switching

Print a test page from each printer. Default settings such as two-sided printing may need setting again; see change default print settings in Windows 11. If you use a newer Arm-based Windows laptop, Mopria printers are also the easiest choice there; our guide to printers on Windows 11 Arm PCs explains why.