On your Windows OS Desktop, a wallpaper is an image displayed behind the graphical user interface when the user’s desktop is visible. We can use Microsoft Intune to manage desktop wallpaper on Windows 10 and later devices.
In this blog post, we will discuss, how to configure Windows 10 / Windows 11 Desktop wallpaper using Microsoft Intune Device Restriction Policy. Microsoft Intune device restriction policies help administrators control Windows, Android, Mac, and iOS devices. These restrictions let you control a wide range of settings and features to protect your organization’s resources.
We will configure two settings (Locked screen picture URL (Desktop only & Desktop background picture URL (Desktop only) through device restriction policy to deploy wallpaper via Intune. Users won’t be able to change the wallpaper when settings are configured through the device restriction policy. These settings are applicable for Windows Enterprise and Education versions. If you apply the same on Windows Professional then you will see a “Not applicable” error for the installation status of this profile.
We need two image URLs which we need to use for the locked screen and desktop background. The URLs should be accessible from all devices.
How to Configure Desktop Wallpaper Using Intune
Follow the below steps to configure Windows 10 / Windows 11 desktop wallpaper through the Microsoft Intune device restriction policy.
- In the Microsoft Intune admin center, Select Devices | Configuration profiles and click on Create a profile.
- Select the following details in “Create a profile” window and click on Create.
- Platform: Windows 10 and later
- Profile type: Templates
- Template name: Device restrictions
- Expand Locked Screen Experience settings.
- For Windows 10 Lock screen, we will select Locked screen picture URL (Desktop only). You need to provide a picture URL that is publicly accessible. For the corporate environment, the URL should be accessible from the company network.
- Scroll down and expand Personalization settings.
- In the Personalization settings, provide the URL for Desktop background under Desktop background picture URL (Desktop only).
- Click on Next to move to Assignment page.
- In the Assignment page, add the Entra ID group ( formerly Azure AD) on which you want to target the wallpaper settings and click on Next. You can apply the policy on User group, Device group, All Users, or All devices. You can also use Intune Assignment Filters for more granular targeting of the policy.
- In the Review + create page, review the settings and click on Create.
The Device restriction policy has been now created. You can check the notifications in the notification area to confirm successful policy creation.
How to Check Policy Status for a Device
You can validate the policy per-setting status for a device from Device Blade. Follow the below steps.
- Navigates to Device | Configuration Profiles
- Click on the Device configuration profile
- Click on Per-setting status
You can see the status for following settings.
- Locked screen picture URL (Desktop only)
- Desktop background picture URL (Desktop only)
Once the policy is successfully applied to Windows 10 / Windows 11, you can also find the following details in the Registry. This is useful in case you are not getting the desired result and troubleshooting the issue. More details about PersonalizationCSP can be found here.
End User Experience
Here is the end-user experience for desktop wallpaper and the locked screen.
- Manage Edge Chromium favorites with Endpoint Manager | Intune
- Configure Edge Chromium Homepage & Startup Page
- Configure Microsoft Edge Sleeping Tabs using Intune
- Configure Google Chrome settings using Administrative templates | Intune | Endpoint Manager
- Block USB Device with Exception
- Deny Write Access to USB Devices Using Intune Catalog Settings
- Manage Windows 10 /11 Desktop Wallpaper with Microsoft Intune
- Manage Local Admin Password with Intune & Windows LAPS
- How to Create Custom RBAC Role in Intune for LAPS Password Administrator
Subscribe to Techuisitive Newsletter
Be the first to know about our new blog posts. Get our newsletters directly in your inbox and stay up to date about Modern Desktop Management technologies & news.