Intune PowerShell script is not working

Question

Intune PowerShell script is not working

Mohamed Umer 145

Hi there,

I have implemented a PowerShell script in Intune for changing the desktop background image of a device, first of all, it doesn't work even after restarting, and then when I remove the device from the Intune admin the background changes(PowerShell script works).

I am attaching a file of my settings for your reference, please get me through this.

PowerShell Settings.png

MotoX80 37,696 Reputation points

2023-09-06T13:08:31.9266667+00:00

What registry values is your script modifying? Have the user logon to the PC and run regedit to verify that the registry values were correctly changed by your script. (Because your Intune settings indicate to run with the logged on credentials.) Then have the user manually change the desktop image and again verify that the registry values that your script modifies now contain the new values that the user set.
Mohamed Umer 145 Reputation points

2023-09-06T14:18:20.7933333+00:00

@MotoX80 registry values have been changed properly in the user device but the desktop background image is not changing, and when I remove the user's device from intune it changes
MotoX80 37,696 Reputation points

2023-09-06T14:33:48.9066667+00:00

Sounds like you have some other Intune policy/script/setting configured that is affecting this. If the user manually sets the desktop image, does that work? Or is it still set to some other image? If you search the registry, can you find any reference to this unwanted image file?

On my Win11 laptop, the image is in HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper. Is that the value you are setting?

Answer accepted by question author

0 additional answers

Your answer

MotoX80 37,696 Reputation points

2023-09-06T13:08:31.9266667+00:00

What registry values is your script modifying? Have the user logon to the PC and run regedit to verify that the registry values were correctly changed by your script. (Because your Intune settings indicate to run with the logged on credentials.) Then have the user manually change the desktop image and again verify that the registry values that your script modifies now contain the new values that the user set.
Mohamed Umer 145 Reputation points

2023-09-06T14:18:20.7933333+00:00

@MotoX80 registry values have been changed properly in the user device but the desktop background image is not changing, and when I remove the user's device from intune it changes
MotoX80 37,696 Reputation points

2023-09-06T14:33:48.9066667+00:00

Sounds like you have some other Intune policy/script/setting configured that is affecting this. If the user manually sets the desktop image, does that work? Or is it still set to some other image? If you search the registry, can you find any reference to this unwanted image file?

On my Win11 laptop, the image is in HKEY_CURRENT_USER\Control Panel\Desktop\Wallpaper. Is that the value you are setting?

Answer 1

Crystal-MSFT 54,311 Microsoft External Staff

@Mohamed Umer, Thanks for posting in Q&A. From your description, I know the PowerShell Script to change desktop background image is not working until the device is unenrolled from Intune. If there's any misunderstanding, feel free to let us know.

It seems the script has been deployed successfully and the registry key for desktop backgorund image has been changed in the registry key. But it doesn't take effect although we restart the device.

to Clarify our issue, please collect the following information:

For the affected user, if we login other devices, did it have the same result?
What is the status of the PowerShell script in Intune portal for the affected device?
How many devices are affected? Did it affect all? Is there any difference between the working one and not working one?
Was there any other policy or script assigned to the same user and same device which also set desktop background image?

Please check the above information and if there's any update, feel free to let us know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Mohamed Umer 145 Reputation points

2023-09-07T06:55:58.13+00:00

@Crystal-MSFT ,

Let me tell you the scenario, As an Admin I am an adding two policies to all the users connected in the company domain and I am testing it on 2 users.

1st policy : Automatic lock screen when the device is in active

2nd : Changing desktop background image using PowerShell script

Now the procedure I follow is:

step 1: assigning license to the users, Microsoft Intune plan 1 Device

intune license.png

step 2: creating a group, adding users to that group in azure ad and devices they are using(As an Admin I have joined their device to the domain)

group creation.png

step 3: In Intune Admin center, windows device enrollment, adding the group I created, to the MDM user scope.

mdm.png

step 4 : Creating automatic lock screen policy(Intune admin enter->Devices->windows->configuration profiles->create->platform ->windows 10 and later->profile type->settings catalog->create.

Name and description ->configuration settings->Device lock->max inactivity time->time set for 10mins->assigning the group i have created earlier->review and create.

auto lock policy.png

step 5: Creating PowerShell script .

Devices->Windows->Scripts->platform scripts->add->add name->configure settings(settings in the screenshot)->assigning the group I have created earlier->review and create.

PS script.png

step 6: adding device from user end

download company portal from store, signing in with their email.

add device(it shows error saying that this device is already connected)

then I go to access work or school and click on enroll device with MDM, now in company portal it shows their device, and the device is also shown in intune admin center.

NOW,

the issue is, the auto lock screen policy for 10mins which I have created now is not working in the user device, Its working for 60seconds which was the policy I have created for the very first time and tested on my device and later deleted it.

the 2nd issue is , PowerShell script is not working in their device after creating policy and enrolling user in Intune, but when I deleted the user's device from Intune admin center ,suddenly wallpaper changes.

Please take time and read it and solve this issue , I have been trying it from 2 weeks with different users and same thing is happening.

thanks
Crystal-MSFT 54,311 Reputation points Microsoft External Staff

2023-09-07T07:42:13.0166667+00:00

@Mohamed Umer, Thanks for the reply. For the affected device, please check the join type to see if it is Azure AD registered. If yes, this can be the issue. Based as I know, for Azure AD registered device, the currently login user is local user on the device. As our policy is assigned for Azure AD user, so it is not working.

To fix this, you can unenroll these devices from Intune, delete them in Azure AD and then re-enroll them via Azure AD join+ automatic enrollment. After that, login with the Azure AD user account to see if these policies can be applied.
Mohamed Umer 145 Reputation points

2023-09-07T08:04:23.79+00:00

@Crystal-MSFT

thanks for spending some time to have a look at my issue.

yes its Azure AD Joined,

Azure AD.png

So Now you are saying we either have to be connected with Azure AD or MDM??
Crystal-MSFT 54,311 Reputation points Microsoft External Staff

2023-09-07T08:18:48.61+00:00

@Mohamed Umer, Thanks for the confirmation. From the picture, I notice the device is Azure AD joined. Could you confirm if we use the Azure AD user account login this device?

Could you also check the PowerShell script assignment status to see if it is successfully deployed in Intune Portal?
Mohamed Umer 145 Reputation points

2023-09-07T08:24:21.9266667+00:00

@Crystal-MSFT

See I have joined a device to the azure ad being an admin ,now an azure ad user is logged in to this device and using it.
Crystal-MSFT 54,311 Reputation points Microsoft External Staff

2023-09-08T01:41:53.4533333+00:00

@Mohamed Umer, Thanks for the reply. Could you confirm if we use the following account log in the affected device? In the previous reply. I notice the license is device license not user license. Could you get a screen shot the license assigned to the following user to double confirm?

Share via

Intune PowerShell script is not working

0 additional answers

Your answer