GPO for setting a picture on the Microsoft login screen

🧩 Option 1: Using Group Policy (Recommended for domain environments)

📍 Steps

1. Open Group Policy Management (gpmc.msc)
2. Create a new GPO (e.g., “Custom Lock Screen Image”) and link it to the desired OU
3. Edit the GPO:

Computer Configuration
└── Administrative Templates
    └── Control Panel
        └── Personalization

4. Find and configure:

• Policy: Force a specific default lock screen image
• Set to: Enabled
• In the Image Path, enter a local path like: C:\Windows\Web\Screen\customlock.jpg

---

📁 Step 2: Deploy the Image File

Group Policy does NOT copy the image automatically—you must deploy it.

Option A: Use Group Policy Preferences (File Copy)

Inside the same GPO:

Computer Configuration
└── Preferences
    └── Windows Settings
        └── Files

• Action: Create
• Source file: \\yourdomain\SYSVOL\yourdomain\scripts\customlock.jpg
• Destination: C:\Windows\Web\Screen\customlock.jpg

---

Option B: Use a Startup Script

Create a script like:

copy "\\yourdomain\SYSVOL\yourdomain\scripts\customlock.jpg" "C:\Windows\Web\Screen\customlock.jpg" /Y

Then assign it under:

Computer Configuration
└── Policies
    └── Windows Settings
        └── Scripts (Startup)

---

🔐 Important Notes

• Image must be:
  • JPG format
  • Accessible by SYSTEM account
• Recommended resolution:
  • 1920×1080 or higher (e.g., 4K for scaling)
• Ensure permissions:
  • C:\Windows\Web\Screen\ is readable by all users

---

⚠️ Windows Version Considerations

• This policy works on:
  • Windows 10 Enterprise/Education
  • Windows 11 Enterprise/Education
• On Pro editions, behavior may vary unless managed via MDM or registry

---

🧪 Optional: Registry Equivalent

If needed, the policy sets:

HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization

• Value: LockScreenImage (REG_SZ)
• Data: C:\Windows\Web\Screen\customlock.jpg

---

✅ Testing

After applying:

gpupdate /force

Then lock the machine (Win + L) to verify.