The images in this article were generated with artificial intelligence. How we publish
Microsoft has confirmed that a failure in the Universal Print sharing system - the cloud solution that replaces local printing servers and allows to manage printers from Microsoft 365 - is caused by a change in the Microsoft Graphh API code. The incident, identified in the Microsoft message center as UP1287359, causes some attempts to create printer compartments to end up with "Sharing Print Failed" errors on the Universal Print portal.
According to the information disseminated by the company itself, the problem particularly affects the situations in which the impressions are shared by activating the option of allowing the all users of the organisation or when certain users or groups are selected during the creation of the shared resource. Microsoft explains that a change in Microsoft Graphh generated an error that increased latency in the replication of the Entre ID directory (before Azure AD) and, as a result, brought out a previous career condition in Universal Print's sharing creation flow.

This had two adverse effects: on the one hand, the late replication of the directory made information on users and groups not immediately available; on the other, the process's reattempt logic did not act correctly against this latency, so the sharing operation was not completed as expected. Microsoft has described the matter as an incident - a label that is often reserved for failures with a significant impact on users - but has not yet publicly broken down the affected regions or the exact number of customers involved.
While deploying a correction to the Graphh code, Microsoft has facilitated a mitigation procedure that allows to remove the failure and complete the task of sharing printers by avoiding the conditions that trigger the error. In essence, the recommendation is to first create the sharing without marking the global access box or assigning users or groups in the same operation; after waiting a few seconds for the configuration to spread, you have to return to the shared resource and manually add the accounts or groups that should have access, preferably opting for an organizational security group if the intention is to give access to the entire company.
It is a compromise solution that, while adding extra steps to the normal flow, reduces exposure to the late replication of the directory and allows to continue operating until the correction is fully effective. Microsoft also recommends waiting between one and two minutes and retrying to create if the first attempt fails, as the availability of information in Enter ID can improve in that interval.
Universal Print is part of a growing set of cloud-managed services whose proper operation depends on coordination between components such as Entre ID, Microsoft Graphh and management portals. Universal Print official documentation and management guides remain a useful reference for managers who need to check configurations, compatibilities or permissions: Universal Print documentation. For those who want to deepen on how Microsoft communicates changes and corrections to its unified API, the Microsoft Graphh change log is also a relevant reading: Microsoft Graphh change log.
The event is a practical reminder that an apparently clamped modification in a platform API can have cascade effects on dependent services. In this case, the error in Graph did not directly break the printing logic, but altered replication times and made visible a latent career condition in Universal Print; timing and replication failures are often the most difficult to detect and reproduce in distributed environments.

It is not the first time in recent weeks that Microsoft is forced to issue urgent patches or reverse updates for problems with user experience in extensive services. In April and early May the company launched off-cycle updates to correct problems that affected the start-up with Microsoft accounts and, in another case, reversed an update that prevented users from opening the Microsoft Teams desktop client. Emergency corrections related to update and reboot problems have also been published on some Windows servers. These movements show how the company prioritizes rapid mitigation when the stability of critical services is compromised.
For IT administrators and managers the practical recommendation is to monitor the state of service and apply Microsoft's time guidelines if necessary. The Microsoft message centre and documentation are the official sources where warnings, mitigation instructions and correction deployments are published: regularly consult the UP1287359 message at your management center and Microsoft support pages to be aware of the final resolution.
Meanwhile, applying the mitigation indicated by Microsoft allows to keep cloud printing operational at a small additional operating cost. And it also serves as an invitation to review management processes and automations that involve assumptions about the immediacy of directory replication, so that corporate environments are less vulnerable to this type of intermittent latences.
Related
More news on the same subject.

Four Plex2Shell CVE allows remote execution and mining and proxy backdoor deployment
In recent days, an increase in attacks has been confirmed that take advantage of a chain of failures in Plex Media Server - nicknamed "Plex2Shell" by researchers - to run code r...

GhostAction Expands Attack: phishing to steal credentials and persistence in VS Code
A group behind the GhostAction campaign - already known for infiltrating GitHub Actions workflows into open source projects - has expanded its arsenal: in addition to installing...

ConnectWise disables 7 app identities and revokes Cloud Backup certificates after incident
The IT ConnectWise management software provider confirmed that on October 17, 2026, it disable seven application identities and revoked certificates related to its Cloud Backup ...

Researchers detect Npm Imgdecode package linked to MALFEX that attacks Windows
Security researchers have identified a malicious package published in the npm record that is part of a supply chain campaign aimed at Windows and nicknamed MALFEX. The package, ...

OpenBSD 7.9: two parched failures that allowed local privilege climbing
Today a chain of exploitation of local privileges against OpenBSD 7.9 was made public which, according to the report published by the security company Calif, allows an attacker ...

OpenAI reveals unaligned IA incidents; a GPT-5.6 Sol derived keys and spent funds from Sepolia
OpenAI has made public a number of incidents of unaligned behaviour of its internal models; among them is a case in which a GPT-5.6 family research model Sol derived private key...

Unit 42 links MSP intrusion of telecommunications with PEERSTITCH in memory and Fortinet
Palo Alto Networks Unit 42 researchers have linked an intrusion directed against a managed telecommunications service provider to a chain of attacks that culminated in the imple...