Manage Desktop Wallpaper with Microsoft Intune

On your Windows 10 and Windows 11 desktops, the wallpaper (desktop background) is the image displayed behind the graphical user interface whenever the user’s desktop is visible. This background appears behind all icons, folders, and open applications on the computer screen. Microsoft Windows personalization settings allow you to choose from a variety of wallpapers, including photos, solid colors, or custom designs, and even configure a desktop slideshow that changes periodically

Traditionally, users change their wallpaper by right‑clicking on the desktop, selecting “Personalize”, and choosing a background from the Background settings. However, in enterprise environments, IT administrators often need to enforce a standard wallpaper or lock screen image for branding, compliance, or security purposes.

This is where Microsoft Intune device configuration policies come in. Using Intune personalization CSPs (Configuration Service Providers), organizations can centrally set and manage desktop wallpaper and lock screen images across enrolled Windows 10 Pro, Enterprise, and Windows 11 devices. Intune provides a scalable way to apply desktop background policies, enforce corporate branding, and ensure a consistent user experience without relying on traditional Group Policy Objects (GPOs).

TL;DR

Use Intune’s Device restriction profile to push desktop and lock screen wallpapers via publicly‑accessible image URLs. The feature works on Windows 10/11 Enterprise and Education — users can’t modify it once applied.

Prerequisites

To configure desktop and lock screen wallpapers using Intune, you’ll need two publicly accessible image URLs—one for the desktop background and one for the lock screen wallpaper.

These images must be hosted in a location that can be accessed by all enrolled devices. You can achieve this by:

• Uploading the images to Azure Blob Storage and generating public access links, or
• Using any web-accessible image URL that’s reachable from the target Windows 10/11 devices.

📌 Make sure the URLs point directly to the image files (e.g., .jpg, .png), and that the hosting platform doesn’t require authentication or redirects.

Configure Desktop Wallpaper Using Intune Device Configuration Policies

In this guide, you’ll learn how to configure desktop and lock screen wallpapers on Windows 10 and Windows 11 devices using Microsoft Intune. We’ll use the Intune Device Restriction Policy to enforce custom wallpapers as part of your organization’s branding and compliance standards.

Microsoft Intune device restriction policies allow IT administrators to manage and secure settings across Windows, Android, macOS, and iOS platforms. These policies provide granular control over features and system behaviors to help protect corporate resources and enforce compliance.

In this example, we’ll configure the following settings through a device restriction policy in Intune:

• Desktop background picture URL (applies to desktop only)
• Lock screen picture URL (applies to desktop only)

Once deployed, users will not be able to change the wallpaper manually—this is by design when using Intune’s device restriction settings.

⚠️ Important Note: These wallpaper settings are supported only on Windows 10/11 Enterprise and Education editions. If applied to devices running Windows 10 or 11 Professional, the policy will return a “Not applicable” status under the profile installation report.

Let’s understand how to configure Windows 10 / Windows 11 Desktop wallpaper using Microsoft Intune Device Restriction Policy. Microsoft Intune device restriction policies help administrators control Windows, Android, Mac, and iOS devices. These device restrictions let you control a wide range of settings and features to protect your organization’s resources.

Step‑by‑Step Guide to Creating a Wallpaper Policy

Follow the steps below to configure desktop wallpaper on Windows 10 and Windows 11 devices using a Microsoft Intune device restriction policy.

• On the Microsoft Intune admin center, Select Devices | Configuration profiles and click on Create a profile.
• Select the following details in the “Create a profile” window and click on Create.
  • Platform: Windows 10 and later
  • Profile type: Templates
  • Template name: Device Restrictions

• Expand Locked Screen Experience settings.
• In the Locked Screen Experience settings of your Intune policy, you can configure the Windows 10 lock screen wallpaper to enforce a consistent corporate look across managed devices. For Windows 10 desktops, select the option Locked screen picture URL (Desktop only). You must provide a publicly accessible image URL that points to the lock screen wallpaper.

In a corporate environment, this URL should be hosted on a secure and reliable location such as Azure Blob Storage or a company web server, ensuring that the image is accessible from the corporate network. By applying this Intune lock screen wallpaper policy, IT administrators can standardize the user experience, reinforce corporate branding, and maintain compliance across Windows 10 and Windows 11 devices.

• Scroll down and expand the Personalization settings in your Intune configuration profile.
• Under this section, provide the Desktop background picture URL (Desktop only), which points to the image you want to use as the Intune desktop wallpaper. Make sure the wallpaper image is hosted on a location that is publicly accessible or available through your corporate network (such as Azure Blob Storage) so devices can retrieve it without issues.
• Once the desktop wallpaper URL is entered, click Next to proceed to the Assignment page, where you can target the policy to specific Entra ID groups, user groups, or device groups.

• On the Assignment page, select the appropriate Microsoft Entra ID group (formerly Azure Active Directory) that you want to target with the Intune desktop wallpaper policy, then click Next to continue. You can assign the wallpaper configuration to a User group, Device group, All Users, or All Devices, depending on your deployment needs. For more granular targeting, you can also leverage Intune Assignment Filters to narrow the scope of the policy and ensure that the desktop wallpaper settings apply only to specific devices or user segments

• On the Review + Create page in the Intune portal, carefully review all the configured settings for your Intune desktop wallpaper policy. Once you confirm the configuration details, click on Create to deploy the wallpaper policy to targeted Windows 10 and Windows 11 devices. This ensures that your Intune desktop wallpaper configuration is applied consistently across managed endpoints, enforcing corporate branding and compliance requirements.

The Intune device restriction policy has now been successfully created. To verify deployment, check the notifications area in the Intune admin center or on the Windows 10/Windows 11 device to confirm that the desktop wallpaper and lock screen settings have been applied. Monitoring notifications ensures that your Intune desktop wallpaper policy is active and that the configuration has been pushed to the targeted Entra ID groups, user groups, or device groups without errors.

How to Check the Policy Status for a Device from Intune

You can validate the Intune desktop wallpaper policy by checking the per‑setting status of a device in the Device blade. Follow the steps below to confirm whether the wallpaper and lock screen configurations have been applied successfully:

• Navigate to Devices > Configuration Profiles in the Intune admin center.
• Select the relevant device configuration profile.
• Click on Per‑setting status to view detailed compliance information.

Here, you will see the deployment status for the following Intune personalization CSP settings:

• Locked screen picture URL (Desktop only)
• PersonalizationLockScreenImageStatus
• PersonalizationDesktopImageStatus
• Desktop background picture URL (Desktop only)

By reviewing these settings, IT administrators can confirm whether the Intune lock screen wallpaper and Intune desktop wallpaper policies have been successfully enforced across Windows 10 and Windows 11 devices. This validation step is critical for troubleshooting and ensuring consistent corporate branding across managed endpoints.

How to Check the Policy Status for a Device Registry Keys

Once the Intune device restriction policy is successfully applied to a Windows 10 or Windows 11 device, you can validate its effectiveness by checking the Windows Registry. This step is particularly useful for troubleshooting Intune desktop wallpaper policies when the expected wallpaper or lock screen image is not appearing.

In the Registry, you will find detailed entries created by the Personalization CSP (Configuration Service Provider), which controls wallpaper and lock screen settings. Reviewing these registry values helps IT administrators confirm whether the Intune desktop wallpaper and Intune lock screen wallpaper configurations have been correctly enforced.

For more technical details and reference, you can explore the official documentation on PersonalizationCSP, which explains how Intune applies and manages these settings across managed endpoints.

Registry key: HKLM\Software\Microsoft\Windows\CurrentVersion\PersonalizationCSP

End User Experience

Once the policy is successfully applied, end users will notice the following:

• The desktop background and/or lock screen wallpaper will automatically update to the image specified in the Intune policy.
• Users will not be able to change the wallpaper manually through system settings. The “Background” and “Lock screen” options under Settings → Personalization will appear grayed out or disabled.
• No visible prompts or notifications are shown to the user during the wallpaper change — the update happens silently in the background.
• If the device is not connected to the internet at the time of policy deployment, the wallpaper change will occur once the device regains connectivity and syncs with Intune.

💡 Tip: If you’re applying both lock screen and desktop wallpapers, make sure the images are visually distinct so that end users can easily recognize the change.

Desktop Wallpaper:

Lock Screen:

FAQs

Q1: Can Microsoft Intune set the desktop wallpaper on Windows 10 Pro?
Yes, Intune can configure wallpaper policies, but certain personalization CSPs may not apply to Windows 10 Pro editions. For full support, use Windows 10 Enterprise or Windows 11 Enterprise.

Q2: How do I enforce a company wallpaper using Intune?
You can create a device configuration profile in Intune, use the Personalization CSP, and specify the desktop background image URL hosted on Azure Blob Storage or another accessible location.

Q3: What’s the difference between Group Policy and Intune for wallpaper management?
Group Policy Objects (GPOs) are traditional on‑premises tools, while Intune policies provide cloud‑based, modern management for hybrid or remote devices. Intune is more scalable and integrates with Microsoft Entra ID.

Q4: Can Intune also configure lock screen wallpaper?
Yes, Intune supports both desktop background and lock screen images through device restriction policies.

Q5: Why is my Intune wallpaper policy not applying?
Common causes include:

• Device edition mismatch (Pro vs Enterprise)
• Incorrect CSP path or registry settings
• Wallpaper image not accessible via URL
• Policy conflicts with other configuration profiles

Related Posts

• Understanding Windows Autopatch with Intune
• Manage Edge Chromium favorites with Endpoint Manager | Intune
• Configure Edge Chromium Homepage & Startup Page
• Configure Microsoft Edge Sleeping Tabs using Intune
• Configure Google Chrome settings using Administrative templates | Intune | Endpoint Manager
• Block USB Device with Exception
• Deny Write Access to USB Devices Using Intune Catalog Settings
• Manage Windows 10 /11 Desktop Wallpaper with Microsoft Intune
• Manage Local Admin Password with Intune & Windows LAPS
• How to Create a Custom RBAC Role in Intune for LAPS Password Administrator