Default Domain Lock Screen in Group Policy Management

Question

question

cjcuster89-2897 asked Aug 4, '20 ShivamSingh-7062 commented Apr 14, '22

Default Domain Lock Screen in Group Policy Management

Hi. I'm having an issue with setting a lock screen in my domain. I have created the image and placed it on one of our network shared drives which is \\server\folder\folder\image.png (this is an example path, but same formatting.

I have also created and set up the parameters for a new object under Group Policy Objects --> New. Then Policies --> Administrative Templates --> Control Panel --> Personalization (seen below)

Now at this part is where I'm a bit confused. I know I have to link the GPO somewhere in the domain, but I'm not sure where to. Should I link it directly to our domain under domain.local (again, example see screenshot). Or should it go under the destinations where to workstations are? I've tried both and did a gpupdate/force on my computer and restarted but the lock screen isn't changing. Does the whole server have to be restarted for it to take effect? I appreciate any help.

windows-group-policy windows-server-2012

capture.png (13.6 KiB)

capture2.png (23.6 KiB)

· 1

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AhmedHamed-1529 · Feb 17, 2021 at 02:30 PM

Try to change the picture name

0 ·

Answer 1 · 2020-08-05T02:08:48.303Z

FanFan-MSFT answered Aug 5, '20 ShivamSingh-7062 commented Apr 14, '22

Hi,

Since the group policy is under Computer Configuration, we have to link the GPO to the OUs containing the workstations or the domain level.
If you link the GPO to the domain level , all the workstations in the domain will apply the policy.
If you link the GPO to the OU level, only workstations in the OU will apply the policy, workstations not in the OU will not effected by the policy.

When you edit the GPO and define the path for the image, type the fully qualified path and name of the file that stores the default lock screen and logon image. You can type a local path, such as C:\windows\web\screen\lockscreen.jpg or a UNC path, such as \\Server\Share\Corp.jpg.

Then on the client run cmd as administrator and type command:

Gpupdate /force

Gpresult /h report.html confirm if the policy was applied.

If the policy was applied in the gpresult, then go into the Registry and verified that the String Value is pointing the the correct path where the custom image is located.
Hive HKEY_LOCAL_MACHINE
Registry Path Software\Policies\Microsoft\Windows\Personalization
Value Name LockScreenImage
Value Type REG_SZ

Welcome to share here if you have any progress.
Best Regards,

· 4

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

cjcuster89-2897 · Aug 05, 2020 at 01:04 PM

Okay, so I've followed your instructions and linked the GPO to the entire domain, but still having an issue. In the GP report I don't see the policy being applied anywhere. I would assume it's under Preferences --> Windows Settings? Or under Applied GPOs? It's not there either.

However, when I check the registry path you specified, I do see that the LockScreenImage is displaying the correct path. But, when I lock the computer, I'm still getting the windows spotlight lock screen. Any other thoughts?

0 ·

capture3.png (9.1 KiB)

FanFan-MSFT cjcuster89-2897 · Aug 06, 2020 at 06:37 AM

Hi,
The settings in the gpresult can be seen under the computer settings>administrative >control panel >

If the policy was applied but not showing correctly , may be a version problem.If it is WIN10 ,it only apply to Windows 10 Enterprise and Education.
https://docs.microsoft.com/en-us/windows/configuration/windows-spotlight

And in this situation , GPO startup script can be used to do this.
https://gallery.technet.microsoft.com/scriptcenter/Change-Lock-Screen-and-245b63a0

Best Regards,

1 ·

8065.jpg (116.0 KiB)

cjcuster89-2897 FanFan-MSFT · Aug 06, 2020 at 12:48 PM

Thanks for providing the script. The machines here at my organization are Windows 10 professional. Unfortunately I'm just local IT and I have no background in coding, so I honestly have no idea how to edit that code to make it work, or how I should go about implementing it. Do you possibly know which values I need to replace and with what so I can make this work?

Thank you,

0 ·

ShivamSingh-7062 FanFan-MSFT · Apr 14 at 12:10 PM

Hi I do not find the script. Please help me

0 ·

Answer 2 · 2020-08-07T06:23:12.597Z

FanFan-MSFT answered Aug 7, '20 FabioFarinha-3439 published Feb 24, '21

Hi,

Download the Powershell script, and save it under a location you can find it easily.

You don't need to change anything in the script. When you deploy the Startup script GPO, we just need to put different parameters into it as following (4 types),you can select one as your requirement:

Create a GPO ,Llink it to the OU containing the computers
Under Computer Configuration -> Policies -> Windows Settings -> Scripts (Startup / Shutdown).Double click it.
Under the Powershell script click add

Script Name:Set-Screen.ps1
Script Parameters:(change it to your own lock image and background image path):
-LockScreenSource "\\SERVER-FS01\LockScreen.jpg" -BackgroundSource "\\SERVER-FS01\BackgroundScreen.jpg"**
Click Show files, and copy the script you download into this location.

Also other steps are needed to be done, you can refer to the following link:
http://woshub.com/running-powershell-startup-scripts-using-gpo/

8078.jpg (32.4 KiB)

80711.jpg (57.2 KiB)

8079.jpg (80.4 KiB)

80710.jpg (71.1 KiB)

80712.jpg (26.4 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

FanFan-MSFT · Aug 10, 2020 at 02:14 AM

=======================
Hi,

Just checking in to see if the information provided was helpful.

If the reply helped you, please remember to mark it as an answer.
If no, please reply and tell us the current situation in order to provide further help

Best Regards,

0 ·

FabioFarinha-3439 FanFan-MSFT · Feb 23, 2021 at 11:46 PM

Hi FanFan-MSFT,

Where do i get the link of the ps1 script that you showed in the picture? Can you post it here?

Thanks

0 ·

Answer 3 · 2021-09-16T13:59:44.687Z

AyodeleOlafare-8395 answered Sep 16, '21

Hello Fanfan

Kindly send me the set-screen .ps1

script for logon screen

ayodele.olafare@outlook.com

image.png (84.4 KiB)

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 4 · 2021-09-17T21:36:38.847Z

DonPickard-7259 answered Sep 17, '21

you can try this archive copy

http://web.archive.org/web/20201112021355/https://gallery.technet.microsoft.com/scriptcenter/Change-Lock-Screen-and-245b63a0

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

question