TL;DR
WPP is designed to strengthen Windows print security, but enabling it without preparation can disrupt critical workflows. Pharos Cloud already delivers robust print security and is fully aligned with WPP requirements, so your organization is protected both today and as changes roll out. Boards and IT leaders should view this as a planning opportunity rather than a reason to react hastily. Modernization and stronger security can, and should, move forward now.
Microsoft’s rollout of Windows Protected Print (WPP) is shaking up enterprise print infrastructure. Designed to improve security by limiting print system privileges, WPP represents a major shift in the Windows printing experience—especially for IT leaders managing large, complex fleets. Print drivers as we use them today will be obsolete under WPP.
We sat down with Pharos Executive Chairman Kevin Pickhardt to get his perspective on what WPP means for organizations, how to prepare, and why a modern print strategy doesn’t have to wait for 2027.
Q: Microsoft is changing how printing works in Windows. What’s your take on the WPP rollout?
Pickhardt: WPP is a clear signal from Microsoft that print security is no longer a side conversation; it’s a core part of the endpoint landscape. By removing legacy driver access to system-level privileges, WPP significantly reduces attack surfaces. It’s a smart architectural change with a big impact to printing as we know it.
Adopting WPP prematurely—before your environment is ready—can introduce serious disruptions. Most existing print drivers will cease to function, be eliminated from user workstations, and existing queues likely get wiped out. Our role at Pharos is to help enterprises secure their print environment today, so that they will be WPP ready, ensuring that mission critical printing will not be disrupted.
Q: So, is WPP necessary to have a secure print infrastructure right now?
Pickhardt: Not necessarily. We’ve built Pharos Cloud with security at the core, from day one. Organizations using Pharos Cloud already benefit from:
- End-to-end encryption
- Serverless printing (no print servers = fewer vulnerabilities)
- Zero Trust alignment
- Driverless IPP (Internet Protocol Printing)
- Per-session validation of users and devices
These capabilities underly the intent behind WPP, but without the compatibility issues that come from enabling it too early. So, no, WPP isn’t the only path to secure printing. You can be protected now with the right solution in place. And, because Pharos operates with a WPP compatible IPP driver, clients are prepared when they choose to implement WPP.
Q: How is Pharos preparing for the future, especially with WPP becoming default by 2027?
Pickhardt: We’re not sitting back. Our team is working directly with Microsoft to ensure continued compatibility between Pharos Cloud and WPP as it evolves. In a recent release, we delivered full WPP compatibility as the base configuration. Clients can continue to use legacy drivers until they, or Microsoft, turn on WPP for their environments.
And we’re not stopping there. At the end of 2025, we launched expanded support for managed direct IP printing, giving organizations even more flexibility in WPP-compliant ecosystems.
Q: What should executive leaders and boards be thinking about right now?
Pickhardt: Boards and executive teams should be asking: Do we have a secure print environment today? What would break if we enabled WPP tomorrow?
I’ve seen far too many organizations rush into tech transitions without a clear understanding of operational impacts. WPP is a good move from Microsoft—but it’s not something you want to flip on without planning.
I recommend boards focus on two things:
- Strategic Readiness – Conduct a fleet audit and identify driver dependencies
- Sustainable Security – Don’t wait on WPP to modernize print. Use this as an opportunity to strengthen your infrastructure now.
Q: Is it safe to wait until WPP becomes the default in 2027?
Pickhardt: Yes, and in most cases, it’s smart to wait. WPP is a one-way switch: once enabled, it removes all non-compatible drivers and doesn’t restore your previous setup if you disable it. That can cause major headaches for IT.
You don’t want to be caught off guard in 2027. But you also don’t need to rush into deployment today—especially if you’re already using a secure, modern platform like Pharos Cloud.
Q: Final advice for organizations evaluating WPP?
Pickhardt: WPP is an inflection point—not just for Microsoft, but for how we think about print in the broader security conversation. This isn’t just about print queues. It’s about trust, architecture, and readiness.
You don’t need WPP to be secure right now. But you do need a strategy—and a partner who’s thinking ahead. Use this window to prepare. Ask questions, map your environment, and choose partners who understand both the risks and the road ahead.
