Intune : Set corporate background and Lockscreen for all Windows joined machines

Large organizations often use desktop wallpapers to convey important information to employees. This can include company achievements, recent news, policy updates, company brand or marketing material and more, ensuring effective communication with the workforce.

You can customize the desktop background picture for Microsoft Managed Desktop devices in your organization.

This artical we will discuss how to set Corporate background and Lockscreen for all Windows joined machines.

Desktop background requirements

These requirements must be met for a desktop background picture:

• Intune Joined machines
• Picture file format: .jpg, jpeg, or .png
• File location: Host on a trusted secure (https) location (in our case, we will share the background image from Azure storage Account).
• Windows Entreprise Edition : for the moment this Policy doesnt work with Windows Pro Edition

So if you dont have an Storage Account, you can find here step by step explanation : Create Azure Storage Account and understand the different use cases by examples | LinkedIn

I – Prepare Wallpapers :

• You will need two wallpapers: one for the lock screen and one for the desktop wallpaper screen.
• Both wallpapers must be in PNG, JPG, or JPEG file/format and stored in a location that is publicly accessible, in my case I will use Azure Blob storage Account, However, you can also use other locations, such as SharePoint Online, OneDrive or Dropbox, if they provide public accessibility for the wallpapers.

1 – Upload wallpapers to Azure Blob storage Account :

After accessing your storage Account, click on the container section and create a new container (you can use an existing container).

See this article to find out how to create a container:

Create Azure Storage Account and understand the different use cases by examples | LinkedIn

I’ll then upload two JPG files, one for the Background and the other for the Lockscreen.

1. File selection: Choose the file you wish to share.
2. Generate SAS: Click on “Generate SAS” to start creating a SAS link.
3. Define validity: Determine the period during which the SAS link will be valid.
4. SAS link creation: Click on “Generate SAS token and URL” to generate the link.
5. Share URL: Copy the generated URL for use in our Intune policy.

These steps enable you to create a SAS (Shared Access Signature) link to provide secure access to a file stored, for example, in Azure Storage. The SAS link is a convenient way of sharing files without having to give full access to your storage account.

Repeat steps 1 to 4 with the second file and copy the URL into a notepad.

II – Create a Device Configuration Profile in Intune :

Here are the red-numbered steps for creating a configuration profile for a machine attached to Intune, as shown in the image :

1. Go to the “Devices” section of the Microsoft Intune administration center.
2. Click on “Configuration profiles”.
3. Click on “+ Create” to start creating a new profile.
4. Select “Windows 10 and later” as the platform.
5. Choose a template for the configuration profile.
6. Choose “Device restriction” Option.
7. Click on “Create” to finalize and create the configuration profile.

These steps guide you through the creation of a configuration profile for Intune attached machines using the Microsoft Intune Administration Center.

Once you’ve clicked on “Create”, you’ll need to configure the “Device Restriction Policy”.

give your Policy a name and click on “Next”.

in the “Configuration Settings” section, add the SAS links already copied from the Blob, as shown in the following images.

in the “Assignment” section, add a specific group or add “All devices” and click on “Next”.

click on the “Create” button to create the “Device Policy”.

End-user Experience

Desktop Background

Similarly, the lockscreen and background are managed by Intune, as shown in the screenshot below. The user cannot change the lock screen background, and the button to browse for a file to change it is greyed out, along with all other settings.

Conclusion

In this blog post, we’ve learned how to set desktop and lock screen wallpapers using Intune. The wallpapers will be centrally managed once you deploy this device configuration profile. Just update the wallpapers in your Azure storage account whenever you want to deploy new desktop backgrounds and lock screens on the devices.

Thanks