Default Domain Lock Screen in Group Policy Management

Question

Hi. I'm having an issue with setting a lock screen in my domain. I have created the image and placed it on one of our network shared drives which is \server\folder\folder\image.png (this is an example path, but same formatting.

I have also created and set up the parameters for a new object under Group Policy Objects --> New. Then Policies --> Administrative Templates --> Control Panel --> Personalization (seen below)

Now at this part is where I'm a bit confused. I know I have to link the GPO somewhere in the domain, but I'm not sure where to. Should I link it directly to our domain under domain.local (again, example see screenshot). Or should it go under the destinations where to workstations are? I've tried both and did a gpupdate/force on my computer and restarted but the lock screen isn't changing. Does the whole server have to be restarted for it to take effect? I appreciate any help.

Answer 1

Hi,

Since the group policy is under Computer Configuration, we have to link the GPO to the OUs containing the workstations or the domain level.
If you link the GPO to the domain level , all the workstations in the domain will apply the policy.
If you link the GPO to the OU level, only workstations in the OU will apply the policy, workstations not in the OU will not effected by the policy.

When you edit the GPO and define the path for the image, type the fully qualified path and name of the file that stores the default lock screen and logon image. You can type a local path, such as C:\windows\web\screen\lockscreen.jpg or a UNC path, such as \Server\Share\Corp.jpg.

Then on the client run cmd as administrator and type command:

Gpupdate /force

Gpresult /h report.html confirm if the policy was applied.

If the policy was applied in the gpresult, then go into the Registry and verified that the String Value is pointing the the correct path where the custom image is located.
Hive HKEY_LOCAL_MACHINE
Registry Path Software\Policies\Microsoft\Windows\Personalization
Value Name LockScreenImage
Value Type REG_SZ

Welcome to share here if you have any progress.
Best Regards,

Answer 2

Hi,

Download the Powershell script, and save it under a location you can find it easily.

You don't need to change anything in the script. When you deploy the Startup script GPO, we just need to put different parameters into it as following (4 types),you can select one as your requirement:

Create a GPO ,Llink it to the OU containing the computers
Under Computer Configuration -> Policies -> Windows Settings -> Scripts (Startup / Shutdown).Double click it.
Under the Powershell script click add

Script Name:Set-Screen.ps1
Script Parameters:(change it to your own lock image and background image path):
-LockScreenSource "\SERVER-FS01\LockScreen.jpg" -BackgroundSource "\SERVER-FS01\BackgroundScreen.jpg"
Click Show files, and copy the script you download into this location.


Also other steps are needed to be done, you can refer to the following link:
http://woshub.com/running-powershell-startup-scripts-using-gpo/

Answer 3

Hello Fanfan

Kindly send me the set-screen .ps1

script for logon screen

ayodele.olafare@harsh.com .com

Answer 4

you can try this archive copy

http://web.archive.org/web/20201112021355/https://gallery.technet.microsoft.com/scriptcenter/Change-Lock-Screen-and-245b63a0

Answer 5

This powershell has no effect on GPO for windows 10 22H2 Pro and windws11 23H2 Pro