MC1020207 - Microsoft OneNote Windows app: New "OneNote (Desktop) - Protected" virtual printer

Updated March 17, 2025: We have updated the content. Thank you for your patience.

Coming soon for Microsoft OneNote: The new OneNote (Desktop) - Protected virtual printer will roll out to all OneNote Windows desktop app users on x86 (32-bit) and x64 (64-bit) devices. We will automatically install the protected printer on all eligible devices (starting with Current Channel) with OneNote Windows app versions 2410 and later and devices running Windows 11 versions 26100 or higher. As a tenant admin, to ensure the successful installation of this printer on your organization's devices, you must configure specific group policies.

This message is associated with Microsoft 365 Roadmap ID 402540.

When this will happen:

General Availability (Worldwide): We will begin rolling out late February 2025 and expect to complete by early April 2025.

How this will affect your organization:

Why is Microsoft introducing this new printer when we already have a OneNote (Desktop) printer for the OneNote Windows app?

• Since October 2024, as a part of the new Modern Print platform, Windows has introduced a secure printing capability called Windows Protected Printing (WPP), which, when turned On, will uninstall and remove all non-IPP-based (Internet Printing Protocol) printers from independent hardware vendors (IHVs) and independent software vendors (ISVs) from the list of available printers, including the OneNote (Desktop) printer. To prevent feature issues for users of the OneNote (Desktop) printer, we're introducing the new protected virtual printer, which is based on Microsoft's IPP class driver and is compatible with WPP. Learn more about WPP and the Modern Print platform: Modern Print Platform - Microsoft Support

Our organization has many regular users of the Print to OneNote capability using the existing OneNote (Desktop) printer. Should they expect any changes to their workflow?

• No. Like the existing OneNote (Desktop) printer, when users try to print a page, the new virtual printer will display in the list of printers as OneNote (Desktop) - Protected (refer to the screenshot in Print documents and files to OneNote - Microsoft Support). Users can switch to the printer of their choice to print to OneNote. Please note that with WPP on, only the protected virtual printer will be available for printing because the existing non-IPP based printers will be uninstalled. Learn more about WPP and eligible printers: A new, modern, and secure print experience from Windows | Microsoft Community Hub

What happens to the old OneNote (Desktop) printer already installed on user’s devices?

• On the target Windows 11 builds (>26100.0000) with WPP, turning WPP On will automatically uninstall the existing OneNote (Desktop) printer (because it is based on the v4 printer driver). When WPP is Off, the OneNote (Desktop) printer will continue to exist with the new protected printer on user devices when they upgrade to the target OneNote builds.

Can users of the OneNote app turn off or uninstall the new printer?

• Yes, if they have permission to uninstall apps on their device. The new protected virtual printer will be installed as a Print Support App (PSA) and can be completely uninstalled from the list of programs in their Windows Settings > Apps > Installed apps. The new printer can be seen installed as a separate app called OneNote (Desktop) - Protected Virtual Printer. NOTE: With WPP on, uninstalling the new protected virtual printer will break the Print to OneNote experience. To restore the protected printer, users will need to uninstall and then reinstall the OneNote app. Users should ensure their notes are synced before uninstalling to avoid losing unsynchronized changes.

This change will be available by default.

What you need to do to prepare:

This rollout will happen automatically by the specified date with no admin action required before the rollout. Review your current configuration to determine the impact for your organization. You may want to notify your users about this change and update any relevant documentation.

As an admin, how can you ensure all eligible devices in your organization get the new printer installed without issues?

• The OneNote (Desktop) - Protected virtual printer will be installed by default (starting with Current Channel) in all OneNote Windows app versions 2410 and later running Windows 11 versions 26100 or higher.
• Please ensure that the group policy AllowAllTrustedApps is set to Enabled and the group policy BlockNonAdminUserInstall is set to Disabled. These settings are required to complete installation of the new virtual printer on your device. Learn more about other policy settings and registry keys that could prevent installation of this printer: How Group Policy works with packaged apps - MSIX | Microsoft Learn