Joe B.

Expert ★★★★★ 27,853 satisfied customers

Specialities: HP Embedded Web Server, HP FutureSmart, Web Jetadmin, printer security policies, MFP configuration

HP EWS “This feature has been disabled by your administrator” — policies, EWS Config, locked menus & access rights

Technician

Hey! We’ll sort out the HP Embedded Web Server message “This feature has been disabled by your administrator” so you know if it’s a real policy, a locked EWS Config, or a misconfigured security setting.
To target the fix, think about three things:
• Which page shows the warning — Network, Security, Scan to Email, Fax, Job Storage, Apps/ePrint, admin password, or something else?
• Are you on an HP Enterprise / FutureSmart device managed by IT (Web Jetadmin, HP Security Manager, fleet policy), or a standalone LaserJet Pro / OfficeJet in a small office?
• Are you logging into the HP EWS as Administrator (with the correct EWS admin password) or just browsing at user level?
Based on that, we’ll decide whether you can safely re-enable the feature yourself or must involve whoever controls your printer security policy.

Customer

It’s an HP Color LaserJet MFP in our office. When I open the HP Embedded Web Server and go to Scan to Email and some Security settings, I see “This feature has been disabled by your administrator” and some options are greyed out. I’m on the same network but I don’t remember setting any restrictions.

Technician

Got it. That message usually means one (or more) of the following in the HP Embedded Web Server (EWS):
1) An admin password, access control list, or Security → Access Control rule is set, so you’re logged in as a standard user and certain configuration menus are locked.
2) On HP Enterprise / FutureSmart devices, the EWS Config or specific functions (Scan to Email, network protocols, USB, firmware update) are disabled via Enable Features or a Web Jetadmin policy — EWS shows “disabled by your administrator” even if you are local IT.
3) A previous tech hardened the printer with a security checklist, disabling menus to comply with audit, so now you’re seeing a legitimate restriction instead of a bug.

We’ll check if you actually have admin rights on this device. If yes, I’ll show you how to sign in as Administrator in HP EWS, review policies, and re-enable only what you need without breaking security.

Customer

I don’t see any way to log in. The EWS pages just show the warning. How can I tell if there’s an admin account or if something like EWS Config or Enable Features is turned off?

Technician

Step 1 — Confirm if you’re logged in as Administrator in HP EWS
1) In the HP Embedded Web Server, look in the upper-right corner for “Sign In”, a padlock icon, or a username label.
2) If there is a Sign In link, click it. Try the known administrator password for this device (your IT or installer may have set one).
3) Once signed in, restricted menus should unlock. If they still show “This feature has been disabled by your administrator”, that means:
  • The feature is forcibly disabled via Security → Access Control or Networking → Enable Features.
  • Or a fleet management tool (HP Web Jetadmin / Security Manager) is pushing a policy that locks EWS settings.

If you never configured an EWS admin password and cannot sign in, we’ll check whether a previous admin or policy is running the show before we discuss any reset options.

Customer

There is a Sign In link. When I click it, it asks for a password we don’t know. I’m guessing the installer set it. Is that why Scan to Email and some network stuff say “disabled by your administrator”?

Technician

Exactly. On many HP Enterprise and newer HP LaserJet models, when an EWS administrator password is set, non-admin users see:
• “This feature has been disabled by your administrator”
• Greyed out items under Scan / Digital Sending, Security, Networking, Remote Firmware Update, USB ports, etc.

Additionally, under Networking → Enable Features or Security → Access Control, an admin can:
• Disable EWS Config so configuration pages are locked from everyone but centrally managed tools.
• Limit which roles (IT, end users) can edit Scan to Email, Address Book, SNMP, IPsec/Firewall, Web Services and more.

If you own the device and there is no active corporate policy, the “disabled” message is usually just telling you: “You’re not signed in as the EWS admin that controls these settings.”

Customer

We’re a small office with no fancy management tools. If the installer locked it and left, how do we regain control without breaking security or wiping everything?

Technician

Step 2 — Recover access on standalone HP devices (no central IT)
The exact steps depend on the model, but the safe approach is:
• Confirm nobody in-house knows the EWS admin password (front-panel, documentation, password vault).
• If this is truly your printer and not ISP/supplier managed, you can:
  1) Print a Configuration Page from the control panel to check if Administrator or Security settings list an owner or contact.
  2) On many models, local resets like “Restore Factory Settings” or “Restore Security Settings” from the control panel will clear EWS credentials and unlock disabled functions — but this can wipe saved email profiles, address books, or network settings.
  3) Before any reset, document the IP, gateway, DNS, SMTP server, and scan destinations so you can reconfigure them.

If you’d like, an expert can walk through your exact model’s recovery procedure (some FutureSmart and contract devices use service-only resets that you don’t want to guess on).

Customer

What if we are in a domain environment? One of our other HP MFPs shows the same “feature disabled” message on USB printing and Firmware Update, but our security team might have done it on purpose.

Technician

Good callout. In managed environments, that banner is often by design.
Step 3 — Check for centralized HP security policies
• Ask IT if they’re using HP Web Jetadmin, HP Security Manager, or a hardening checklist. Those tools can push policies that:
  – Disable Remote Firmware Update, USB printing, FTP/LPD/IPP, ePrint/web services.
  – Lock Scan to Network, Address Book, access control to admins only.
  – Turn off EWS Config so nobody can change settings from the browser even with local access.
• If a fleet policy is active, any local attempt to re-enable disabled features in EWS may be overwritten. The fix is to adjust the policy, not fight the device.

In short: if the printer is part of a corporate fleet, treat “This feature has been disabled by your administrator” as a security indicator, and loop in whoever owns that policy before changing anything.

Customer

Understood. For our small office device, once we have admin access again, how do we safely re-enable just the features we need without opening security holes?

Technician

Step 4 — Re-enable EWS features with best-practice security
Once you are signed in as Administrator:
• Go to Security → Access Control (or equivalent) and ensure only trusted admins can change Network, EWS, Firmware Update, Scan to Email settings.
• Under Networking → Enable Features or EWS → Enable/Disable Features, enable only what you need:
  – Turn on Scan to Email, Address Book, or Job Storage if they are required.
  – Leave risky protocols (FTP printing, Telnet, unsecured HTTP-only access) disabled unless there is a specific business case.
• Set a strong EWS admin password, enable HTTPS-only where supported, and restrict admin access to internal IP ranges if possible.

This way, the “disabled by your administrator” banner disappears only where it should, and important security controls remain in place.

Customer

If we completely lose the EWS password in the future, is there any option besides a full factory reset that wipes our scan and fax configuration?

Technician

Options depend heavily on model and security level:
• Some LaserJet Pro devices allow a local Restore Security Settings or Restore Defaults that clears the EWS password but also resets network/digital sending settings.
• Many HP Enterprise / FutureSmart models support only documented, secure reset methods (service-level) to protect against unauthorized takeover.
• Before any reset, export or note SMTP settings, addresses, fax numbers, and network parameters so you can rebuild quickly.

If you’re unsure whether your HP model’s reset process is safe or compliant with your policies, a live expert can check your exact firmware and security guide and walk through a minimal-impact plan.

Customer

That explains the message well. Now we know when it’s intentional and how to unlock features we actually own. Thanks for the clarity.

Technician

Summary: The HP Embedded Web Server “This feature has been disabled by your administrator” message is normally a sign of access control, not a fault. First, confirm if you’re logged in as the EWS Administrator. Then review Access Control, Enable Features, and any Web Jetadmin / security policies that intentionally disable menus. Re-enable only necessary functions (like Scan to Email) under a strong admin password and HTTPS, or follow the vendor-approved reset path if you’ve inherited a locked device that you legitimately manage. Need tailored help for your exact HP model and security requirements? Open the chat.

Quick answer: the accepted fix

Accepted fix when the HP Embedded Web Server shows “This feature has been disabled by your administrator”: sign in as the EWS Administrator, verify that restrictions are intentional, adjust Access Control and Enable Features to re-enable only required functions (Scan to Email, networking, storage), keep sensitive options locked, and avoid overriding fleet security policies if the device is centrally managed.

FAQ

Step-by-step: regain appropriate access in HP EWS

1. Open the HP Embedded Web Server via the printer’s IP and look for the Sign In option.
2. Sign in with the known Administrator password; if unknown, confirm ownership and check documentation before considering a reset.
3. In Security → Access Control, verify which roles can modify Network, Security, Scan, Storage, and Firmware settings.
4. In Networking / System → Enable Features, re-enable only the EWS functions required for your workflows, keeping unnecessary services disabled for security.

Note for mixed & managed environments

1. If printers are managed by IT, check HP Web Jetadmin or equivalent before changing local EWS settings; policies may intentionally disable features.
2. Ensure macOS, Windows, and mobile users connect over HTTPS to the EWS where supported, and that only authorized staff hold the EWS admin credentials.

Sources

• HP Support — Disable network protocols and features not in use (EWS)
• HP Support — Configure advanced settings using the Embedded Web Server
• HP Support — Secure your HP printer against unwanted access

Matt ● replies in < 1 min

Technician Expert

⭐⭐⭐⭐⭐ Trusted by 27,000+ customers

Alex · Expert's Assistant

Start Chat

5 Tech Support Specialists are online right now.