How to Prevent Users from Changing Lock Screen and Logon Images using Intune 1

How to Prevent Users from Changing Lock Screen and Logon Images using Intune

by

Key Takeaways

  • Prevents users from changing the Windows lock screen and logon image.
  • Helps maintain a standardized device appearance.
  • Useful for corporate, educational, and shared-device environments.
  • Can be configured through the Intune Settings Catalog.

Let’s checkHow to Prevent Users from Changing Lock Screen and Logon Images using Intune. A customized lock screen can help users personalize their devices, but in many organizations, administrators prefer to maintain a consistent and professional appearance across all managed Windows devices. When this policy is enabled, users can no longer change the image displayed on the Windows lock screen or logon screen. Instead, Windows displays the default image configured by the operating system or organization.

Table of Contents

How to Prevent Users from Changing Lock Screen and Logon Images using Intune

You can prevent users from changing Lock Screen Logon Image using Intune policies. By default, users can change the background image shown when the machine is locked or display the logon screen to Windows Spotlight, picture, or a slideshow.

Create the Prevent Changing Lock Screen and Logon Image Policy

To begin configuring the Prevent Changing Lock Screen and Logon Image policy, sign in to the Microsoft Intune Admin Center and navigate to Devices > Configuration Profiles. Click Create Profile to create a new Windows configuration profile.

  • Sign in to the Intune Admin Center
  • Select Devices > Windows > Configuration profiles > Create profile
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.1
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.1

In Create Profile, Select Platform, Windows 10, and later and Profile, Select Profile Type as Settings catalog. Click on Create button.

Patch My PC
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.2
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.2

Configure the Basics Tab

On the Basics page, enter a policy name such as Prevent Changing Lock Screen and Logon Image Policy. Providing a descriptive name helps administrators quickly identify the purpose of the configuration profile. You can also add a detailed description explaining that the policy restricts users from changing lock screen and sign-in images on Windows devices. After entering the required details, click Next to continue.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.3
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.3

Configure Settings for the Prevent Changing Lock Screen and Logon Image Policy

In the Configuration Settings page, click Add Settings to open the Settings Picker. This is where you will search for and select the required policy setting. Search for Prevent Changing Lock Screen and Logon Image and browse to Administrative Templates > Control Panel > Personalization. Select the setting and add it to the profile configuration.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.4
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.4

Disable State of the Policy

If you want users to regain control over their lock screen and sign-in background images, set Prevent Changing Lock Screen and Logon Image to Disabled. When disabled, Windows users can personalize their devices and change the lock screen image according to their preferences using Windows personalization settings.

 

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.5
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.5

Enable the Prevent Changing Lock Screen and Logon Image Policy

After adding the setting, locate Prevent Changing Lock Screen and Logon Image within the configuration page. Change the setting value to Enabled. When the policy is enabled, users will not be allowed to change the lock screen or logon background image. Windows will display the default image instead of any user-selected image.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.6
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.6

Configure Scope Tags

On the Scope Tags page, assign scope tags if your organization uses role-based administration. Scope tags help control which administrators can view and manage the policy. If scope tags are not required in your environment, you can leave the default configuration unchanged and proceed to the next step.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.7
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.7

Importance of Assignments

On the Assignments page, select the Microsoft Entra user or device groups that should receive the Prevent Changing Lock Screen and Logon Image Policy. In this example, the policy is assigned to the HTMD Test Policy Group and HTMD CPC Test Policy. You can add additional groups by selecting Add groups and choosing the required targets based on your deployment requirements.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.8
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.8

Review + Create page

The Review + Create page displays all configured settings for the Prevent Changing Lock Screen and Logon Image policy. Verify the platform, assignments, and policy configuration. Once you confirm everything is correct, click Create. Intune will create the profile and begin deploying it to assigned device.

A notification will appear automatically in the top right-hand corner with a message. Here, Policy “Prevent changing lock screen logon image” was created successfully.

  • The policy is also shown in the Configuration profiles list.
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.9
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.9

Monitor Deployment Status

After creating the policy, open the profile and navigate to Device Status and User Status. These reports show whether the policy deployment was successful. Monitoring deployment status helps identify devices that have successfully received the Prevent Changing Lock Screen and Logon Image policy and highlights any deployment issues that require attention.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.10
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.10

Verify the Prevent Changing Lock Screen and Logon Image Policy on Client Devices

To confirm if a policy has been applied, use the Event Viewer on the client device. Go to Applications and Services Logs > Microsoft >Windows >Device Management > Enterprise Diagnostic Provider > Admin. From the list of policies, use the Filter Current Log option and search for the latest information ID.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.11
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.11

How to Remove an Assigned Group from this Policy

If the policy is no longer required for specific users or devices, open the profile and navigate to Assignments. Remove the assigned groups from the policy. After saving the changes, Intune stops targeting those groups. During the next policy sync, affected devices will no longer receive the Prevent Changing Lock Screen and Logon Image policy.

  • Open the policy from the configuration tab and click on the edit button. Then, click on the Remove button. Click Review + Save after making the changes.

For detailed information, you can refer to our previous post – Learn How to Delete or Remove App Assignment from Intune using by Step-by-Step Guide.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.12
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.12

How to Delete this Policy from Intune Portal

To permanently remove the policy from Intune, open the Prevent Changing Lock Screen and Logon Image policy and select Delete from the profile. Confirm the deletion when prompted. Once deleted, the policy is removed from Intune and can no longer be managed or assigned unless a new profile is created.

  • First, search for the policy name in the configuration section. When you find the policy name, click the 3-dot menu next to it and tap the Delete option

For more information, you can refer to our previous post – How to Delete Allow Clipboard History Policy in Intune Step by Step Guide.

How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.13
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.13

Configuration Service Provider (CSP)

The Policy CSP allows administrators to manage Windows settings through Microsoft Intune and other MDM solutions. The Prevent Changing Lock Screen and Logon Image policy prevents users from modifying the lock screen and sign-in background image on managed Windows devices.

Description Framework Properties:

Property NameProperty value
Formatchr (string)
Access TypeAdd, Delete, Get, Replace
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Table.1

Note: This setting only applies to Enterprise, Education, and Server SKUs.

ADMX mapping:

NameValue
NameCPL_Personalization_ForceDefaultLockScreen
Friendly NameForce a specific default lock screen and logon image
LocationComputer Configuration
PathControl Panel > Personalization
Registry Key NameSoftware\Policies\Microsoft\Windows\Personalization
ADMX File NameControlPanelDisplay.admx
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Table.2
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.14
How to Prevent Users from Changing Lock Screen and Logon Images using Intune -Fig.14

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the latest step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, join the WhatsApp Community  and the WhatsApp channel to get the latest news on Microsoft Technologies. We are there on Reddit as well

Author 

About Author – Jitesh, Microsoft MVP, has over six years of working experience in the IT Industry. He writes and shares his experiences related to Microsoft device management technologies and IT Infrastructure management. His primary focus is Windows 10/11  Deployment solution with Configuration Manager, Microsoft Deployment Toolkit (MDT), and Microsoft Intune.

2 thoughts on “How to Prevent Users from Changing Lock Screen and Logon Images using Intune”

Leave a Comment