question

FredFulford-1906 avatar image
0 Votes"
FredFulford-1906 asked Crystal-MSFT commented

PersonalizationDesktopImageStatus failed on 14 clients

We deploy a new desktop wallpaper and lock screen image every month to to all Windows devices in our estate via a configuration profile called “Win10_Device_Restrictions - V1.1”, using the settings Locked Screen Experience > Locked screen picture URL (Desktop only) and Personalization > Desktop background picture URL (Desktop only).

69560-url.png

This works on the vast majority of clients, but is failing on some (around 14). Investigation of these clients shows that Deployment Status of Win10_Device_Restrictions - V1.1 shows failed, and when drilling down it shows that every Setting has succeed except for PersonalizationLockScreenImageStatus and PersonalizationDesktopImageStatus.


69635-failed.png

69671-desktopfailed.png


All devices are running Windows 10 Enterprise 20H2 and are fully up to date.


Multiple reboots have not forced the wallpaper and lock screen image to update, we have tried making a change to the policy to push it back out but these two settings are still failing for these clients. PersonalizationCSP registry key on failing client devices shows the correct URLs for both images (as defined in the configuration profile) but the DesktopImageStatus and LockScreenImageStatus are both showing a value of 2 (Download or copy in progress)

69681-reg.png

Have checked permissions,


mem-intune-device-configurations
url.png (22.6 KiB)
failed.png (42.4 KiB)
desktopfailed.png (15.7 KiB)
reg.png (60.4 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
1 Vote"
Crystal-MSFT answered Crystal-MSFT commented

anonymous userFulford-1906, From your description, I know we configured a device configuration policy to set desktop wallpaper and lock screen image. But it is failed. The affected settings are PersonalizationLockScreenImageStatus and PersonalizationDesktopImageStatus. And then you go to the device side to check the registry and find the status is 2 (Download or copy in progress.) Not 1 (Successfully downloaded or copied.). If there's any misunderstanding, feel free to let us know.

In the registry key, I notice the local path of both images are recorded. Could you go to the path and check if the images are there? And check if the folder permission is different with other working ones?

If there's any update, feel free to let us know.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.


· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

if its status is 3 (failed). what need to do next?

0 Votes 0 ·

@UvaizeBA-0496, 3 means "Download or copy failed". You can check whether the URL is accessible in browser. Try to use a different internet image URL and see if it can be downloaded successfully from the profile. However if the issue still persists, to better archive our thread, we suggest to open a new thread to work on it.

Thanks for the understanding and have a nice day!

0 Votes 0 ·
FredFulford-1906 avatar image
0 Votes"
FredFulford-1906 answered Crystal-MSFT commented

Hiya, that is correct. When I check the local path as specified in the registry the image is the one from the previous month.

Many thanks for your response

Fred

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

anonymous userFulford-1906, Thanks for the reply. I am glad that we find the issue. It seems the new image is not downloaded and put into this location. We can check the network connection and file permission to see if it can be fixed.

If there's any update, feel free to let us know.

0 Votes 0 ·

Hiya, network connectivity is fine, I have remotely connected to the machines and opened up the permissions (everybody - full control) on the C:\Windows\Personalization directory and all child objects, restarted the machine multiple times but the new image still doesn't download. Any other suggestions (short of resetting the machines from Endpoint Manager)?

Many thanks

Fred

0 Votes 0 ·

anonymous userFulford-1906, Could you try to access the URL in the registry key via Edge or IE on the device to see if it is accessible on the affected device?

0 Votes 0 ·
FredFulford-1906 avatar image
0 Votes"
FredFulford-1906 answered ThomasB-6792 edited

Hiya, yes I've tried this, the URL is accessible.

· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

anonymous userFulford-1906, Thanks for the reply. From the phenomenon we get, it seems stuck or failed in download and copy phase. Here, we suggest to check the event log to see if there's any error related.

0 Votes 0 ·

Hi Fred,

did you find any solution for this problem? I have exactly the same problem.


Thomas

0 Votes 0 ·

Ok. I have found the solution for our problem. We have to set the company proxy pac for the system users. Our deployment tool had used the 32bit Internet Settings to store the proxy values. We had to force the deployment tool to set the setting in the 64bit internet settings in the registy.

bitsadmin /util /setieproxy localsystem AUTOSCRIPT http://script-uri:8080/wpad.pac
bitsadmin /util /setieproxy networkservice AUTOSCRIPT http://script-uri:8080/wpad.pac
bitsadmin /util /setieproxy localservice AUTOSCRIPT http://script-uri:8080/wpad.pac

At last you should remove the PersonalizationCSP Key. After several attempts the Lockscreen Status value switches to 6 (maximal download attempts reached) and does not try to download the image for several hours.

0 Votes 0 ·
JanHardenberg-8585 avatar image
0 Votes"
JanHardenberg-8585 answered JanHardenberg-8585 edited

You need to generate a SAS token and copy that into your configuration profile:

97820-image.png



image.png (59.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

RobSporcic-3058 avatar image
0 Votes"
RobSporcic-3058 answered FredFulford-1906 commented

Are there any updates on this issue? I've been seeing it for the past few days on a few different devices, and different image urls. I can download the images to a local folder on the device using Invoke-WebRequest -Uri in PowerShell, so it seems like there's no issue downloading the file.

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I'm afraid not, InTune Support have said it's not their problem and referred it to Windows support to investigate it as a CSP issue, will let you know when we get anywhere.

We were able to successfully deploy wallpaper using a powershell script, but this was more of a workaround.





$RegKeyPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\PersonalizationCSP"


$DesktopImage = "DesktopImagePath"
$DesktopImageStatus = "DesktopImageStatus"
$DesktopImageUrl = "DesktopImageUrl"

$StatusValue = "1"


$url = "https://example.com/imageurl"
$DesktopImageValue = "C:\MDM\wallpaper_test.jpg"
$directory = "C:\MDM\"


If ((Test-Path -Path $directory) -eq $false)
{
New-Item -Path $directory -ItemType directory
}

$wc = New-Object System.Net.WebClient
$wc.DownloadFile($url, $DesktopImageValue)



if (!(Test-Path $RegKeyPath))
{
Write-Host "Creating registry path $($RegKeyPath)."
New-Item -Path $RegKeyPath -Force | Out-Null
}


New-ItemProperty -Path $RegKeyPath -Name $DesktopImageStatus -Value $StatusValue -PropertyType DWORD -Force | Out-Null
New-ItemProperty -Path $RegKeyPath -Name $DesktopImage -Value $DesktopImageValue -PropertyType STRING -Force | Out-Null
New-ItemProperty -Path $RegKeyPath -Name $DesktopImageUrl -Value $DesktopImageValue -PropertyType STRING -Force | Out-Null

RUNDLL32.EXE USER32.DLL, UpdatePerUserSystemParameters 1, True




1 Vote 1 ·