Fix Canon Driver Installation Permissions on Azure AD Devices
Question details
Users are unable to install Canon printer and scanner drivers on Azure AD-joined Windows devices due to an insufficient privileges error.

- Product
- Canon Driver Software
- Device & OS
- Windows
- Scenario
- Installing Canon printer or scanner drivers over a network on a device that has been joined to Azure AD.
- Observed behavior
- The installation process fails, prompting an insufficient privileges error even when the user is logged in with administrative rights.
Ensure you have the necessary privileges to create local user accounts on your Windows device and that you have downloaded the latest Canon driver installation package from the official website.
Install Drivers Using a Temporary Local Administrator Account
Since the Canon installer may not properly recognize Azure AD administrator privileges during network setups, using a local administrator account can bypass this permission limitation.
Older or specific versions of hardware installers sometimes fail to parse the administrative tokens provided by Azure Active Directory. Creating a traditional local administrator account temporarily allows the software to verify permissions and install the necessary driver files at the system level.
Go to Windows Settings > Accounts > Family & other users. Click 'Add someone else to this PC' and choose to add a user without a Microsoft account.
Click on the newly created local account, select 'Change account type', and set it to 'Administrator'.
Sign out of your Azure AD account, sign in with the new temporary local administrator account, and run the Canon driver installation package.
Once the drivers are successfully installed, sign back into your Azure AD account, return to the Accounts settings, and delete the temporary local administrator account.

Update Drivers or Contact Canon Support
If the temporary account workaround fails, the installation package might be outdated or fundamentally incompatible with your specific enterprise deployment.
Enhance Your Document Workflow with WPS Office
While you are troubleshooting hardware and printer driver issues, you need a reliable office suite that works seamlessly on your Windows devices. WPS Office is a free, lightweight, and highly compatible alternative to Microsoft Office, perfect for managing your printed documents, PDFs, and daily tasks without heavy resource requirements.
- 1. Download the Software: Visit the official WPS Office website and download the free installer for your Windows device.
- 2. Install WPS Office: Run the installation file and follow the simple on-screen instructions to complete the setup.
- 3. Start Printing and Editing: Open your documents and easily send them to your newly installed Canon printer right from the WPS interface.

Frequently Asked Questions
Why do Azure AD administrators get an 'insufficient privileges' error?
Some legacy or third-party installers fail to properly read or recognize Azure AD administrative tokens. Because they expect traditional local user tokens, they treat the Azure AD administrator as a standard account, triggering the error.
Will the Canon printer work for Azure AD users after installing it via a local account?
Yes. Once the drivers are successfully installed on the system level using the local administrator account, all users on the device, including those logging in with Azure AD accounts, will be able to access and use the printer.
Does this issue affect standard USB printer installations?
Often, USB installations rely on built-in Windows plug-and-play mechanisms and bypass the complex network permission checks, allowing the drivers to install normally without requiring you to create a temporary local account.
Should I leave the temporary local administrator account on my computer?
For security and compliance reasons, especially in an enterprise or Azure AD-managed environment, it is highly recommended to delete the temporary local administrator account immediately after the driver installation is complete.




