This blog is owned and operated by the ANZ ConfigMgr Premier Field Engineer team.
Ian BartlettMatt ShadboltGeorge Smpyrakis
Microsoft have recently released a Windows 8 and Server 2012 cumulative update KB2770917.
One of the important features of this update is the ability to customize the Windows 8 lock screen with corporate branding and set this across your domain joined computers using Group Policy.
From the KB:
This cumulative update includes the following performance and reliability improvements:
After installing the update, you get four new Group Policy settings
Force a specific default lock screen image Provide a UNC or local path to your corporate lock screen logo, and all of your users will receive that as their lock screen.
Prevent changing lock screen image After setting the corporate lock image, enable this option if you don’t want your users to have the ability to personalize the lock screen image.
Prevent changing start menu background Use this option to stop your users from changing the Start Menu background colour. This means whatever the colour of the Start Menu background was when the machine was deployed will not be changed.
Do not display the lock screen Enabling this setting will remove the lock screen for any user who isn’t required to press CTRL+ALT+DEL to login.
After configuring all the settings and applying the GPO, my corporate machines lock screen now looks like this, and my users are stuck with it!
Does it dim your images too when you apply them this way? It's rather annoying.
I installed this update and now I can not change my lock screen , start menu and user account picture any more . they are all disabled to change!
Tomi, check to see that the 'Prevent changing lock screen image' and 'Prevent changing start menu background' setting has not been configured via GPO.
This update doesn't fix the "Lock Screen Error" issue in my office domain m/c.
And I checked, the 'Prevent changing lock screen image' and 'Prevent changing start menu background' setting are not configured.
Do you know any other solution for this issue?
Tomi you should reactive your windows then you can change your lock screen , start menu and user account picture again.
how do you check if the prevent box is checked. where do i look?
I've installed the update on the only 2012 DC we have in a particular domain, yet I do not see the addtional GPO setting? Do I need to be on a certain domain functional level. The functional level is still 2003 but I should be able to raise it to 2008 no problem. I'm not sure that is my issue though...
Good article. I've installed this KB on the Windows8 client and now the GPO with lockscreen works fine !