Create a Device Level Windows Desktop and Lock Screen Settings Policy

Use this policy to configure and set desktop background and lock screen images on managed Windows devices. This helps to ensure a consistent branding and uniform user experience across your organization and prevents users from changing them.

This policy supports the following configurations:

  • Image Sources: Local file path or direct URL (https)
  • File types: JPG, JPEG, and PNG.

Note:

This is a device level policy that applies system-wide to the device and all of its users. You can bind this policy to individual devices or device groups. For policies that apply to a specific user's profile across devices, see Get Started: Policies and Learn More section of this article.

Prerequisites

  • Devices must be enrolled in Windows MDM (Mobile Device Management).
  • Target devices must be running Windows 10, version 1709 [10.0.16299] or later. This policy is supported on the following Windows editions:
    • Windows Pro
    • Windows Enterprise
    • Windows Education
    • IoT Enterprise
    • IoT Enterprise LTSC
  • For Windows Professional (Pro) edition, this feature only works if the SharedPC CSP's SetEduPolicies is configured, or if the device is in Shared PC mode with the BootToCloudPCEnhanced policy enabled. See Create a Custom Windows MDM (OMA URI) Policy to learn more.
    • Following the steps in the above help article, you can create a custom Windows MDM policy with the following settings:
      • OMA URI: ./Vendor/MSFT/SharedPC/SetEduPolicies
      • Format: Boolean
      • Value: true

Considerations

  • This policy is activated immediately once it is saved.

Creating the Policy

To create a Desktop and Lock Screen Settings policy for Windows devices, do the following:

Selecting the Policy Template

  1. Log in to the JumpCloud Admin portal.

Important:

If your data is stored outside of the US, check which login URL you should be using depending on your region. If your organization uses LDAP, RADIUS, or requires firewall allow list configuration, the Fully Qualified Domain Names (FQDNs) will also be region specific. See JumpCloud Data Centers for the URLs, FQDNs, and IP addresses.

  1. Go to Device Management > Policy Management. The Policy Management page is displayed.
  2. On the Policy Management page, click +Add New.
  3. Select Device Policy to assign the policy to devices and device groups. On the New Device Policy page:
    • Select the Windows tab.
    • Search and select the policy name and click Configure. The Details tab of the policy is displayed.
    • On the Details tab, configure the required policy configuration settings.
    • (Optional) In the Policy Name field, enter a new name for the policy or keep the default. Policy names must be unique.
    • (Optional) In the Policy Notes field, enter details such as creation date of the policy, and information on testing and deployment of the policy.

Configuring the Policy

  • In the Settings section, enter the relevant details:
    • Desktop Wallpaper Path - Specify an HTTPS URL or a local file path to a JPG, JPEG, or PNG image.
      For example:
      • https://www.dreamstime.com/red-rose-water-image352882
      • Local Path: C:\Wallpapers
    • Lock Screen Image Path - Specify an HTTPS URL or a local file path to a JPG, JPEG, or PNG image.
      For example:
      • https://www.dreamstime.com/red-rose-water-image352882520
      • Local Path: C:\Wallpapers

Applying the Policy

  • (Optional) Select the Policy Groups tab. Select one or more policy groups where you want to add this policy. 
  • Select the Device Groups tab. Select one or more device groups where you want to apply this policy to. For device groups with multiple OS member types, the policy only applies when a user logs into a supported Windows device that is enrolled in MDM.
  • Or, select the Devices tab. Select one or more devices where you want to apply this policy.
  • Click Create Policy. A success message is displayed indicating the completion of policy creation.

Viewing Policy Status

  1. Select the Status tab.
  2. To see the last Result Log for a device where this policy is applied, click view.

Note:
  • If any errors occur, they're listed in Exit Status. If you have an Exit Status of 0, no errors occurred when applying or enforcing this policy.
Back to Top

Still Have Questions?

If you cannot find an answer to your question in our FAQ, you can always contact us.

Submit a Case