group policy can't set lock screen "some of these settings are managed by your organization"

Question

I have tried all the possible GPO settings for the Lock/Login screen.

It used to work and no longer works.

Even as domain administrator, if I go into personalization and to the Lock Screen page, I get the message "some of these settings are managed by your organization"

I have moved computers to OUs that have no GPs associated, I have gone through GPResult screens, I am definitely missing something(s).

Question: Where might I look, and for what, that would block all possible settings of the Lock Screen in GPO?

Bonus Question: Is there a way to NOT filter out local PC registry settings?

Thanks!

Kevin

Answer 1

Hi Kevin,

Thank you for posting in the Microsoft Community Forums.

If you, as a domain administrator, are still unable to change the personalization settings for the lock screen interface and receive the message “Some of these settings are managed by your organization”, it is likely that your Group Policy has configured settings that override the user's personalization choices.

Are you trying to block these related Group Policy settings?

To resolve this issue, you can navigate to “Computer Configuration” (or “User Configuration”) > “Administrative Templates” > “Control Panel “ > ‘Personalization’.

Regarding filtering out local PC registry settings, I don't really understand what you want to require.

Maybe your needs don't have much to do with AD (Active Directory), you can try to ask under other tags about how to filter out local PC registry settings.

Best regards

Neuvi Jiang

Answer 2

I apologize for wasting anyone's time if I wasn't clear in my intent..

I'm trying to set the Lock/Login background. I know HOW to do it, and have done it many times even in this domain. NOW I get the blocked popup pasted above. I'm looking for where I might be able to disable that situation, but can't find it in the GPOs I have in place, etc.

I have tried a lot of things, including removing the PC from the domain, but that block remains. Is there something local to the PC that I can alter to kick that out? Some global security setting in the domain other than GPOs that can set it? etc.

Thanks!

Answer 3

Hi Kevin,

Have a nice day!

So you are trying to do wallpaper modification on PC lock screen yes? But “some of these settings are managed by your organization” will appear and you will not be able to change the wallpaper on the lock screen.

Best regards

Neuvi Jiang

Answer 4

Yes. I removed a PC from the domain, back into a workgroup. I did a "gpupdate /force" then rebooted. "gpresult /scope /computer /r" and "gpresult /scope user /r" both show that there are "N/A" "Applied Group Policy Objects" - but both still show "Local Group Policy" "were not applied because they were filtered out" - filtered out Where? By What? Both my local group policy and registry settings have the LockScreenImage set, but neither is being utilized. Likewise, both my Default User and Default Computer domain GPOs had the LockScreenImage set - but none were changing (or allowing me to interactively change) the default (Windows Spotlight) lock screen.

I say again, this worked a month or two ago, not really sure when it stopped, but the PCs already in production are still working as defined. Just the new ones won't take these settings...

Does that help?