The customization of the wallpaper and the lock screen with Intune via the Settings Catalog as locally with GPOs is only possible with a Windows Enterprise license. This means that companies using the Microsoft 365 Business Premium license cannot easily set the wallpaper or lock screen with Intune.
But there are solutions here too, with a Win32 package you can set the same settings manually. You also have the advantage that you don't have to store the image on a web server, you can simply put it in a Win32 package.
Table of Contents
- Customize wallpaper and lockscreen
- Update wallpaper or lock screen
- Remove wallpaper and lock screen
My prepared package sets the desktop background and/or the lock screen for Windows 10 / 11. You can include the desired image files as JPG or PNG in the package and distribute them to the devices in your company with Intune.
You can find the package including example in my GitHub repository:
Customize wallpaper and lockscreen
Customization with your images is very simple, you just have to place them in the "Data"put down and in"install.ps1" in line 6 and 7 with the appropriate name:
Do you only want the lock screen or background, you can just leave the other value blank.
Once this is done, you can generate an Intunewin from the whole package.
To do this, proceed as follows:
- Load the current one Microsoft Win32 Content Prep Tool down
- Open the downloaded "IntuneWinAppUtil.exe"
- Provide the path to your package
- Specify the installation file: install.ps1
- Enter the path to the storage of the .intunewin file
- If there is already a file with the corresponding name, you can delete / overwrite it
- For the Catalog Folder question, we choose No (N)
- Done, that was creating the Win32 App / "intunewin".
You can now upload this file to Intune as a Win32 app.
Intune > Apps > Windows apps > +Add
In the next step you give the app a name, a description and the publisher. These fields are mandatory. All others are optional.
In the program settings we have to store the installation behavior as well as the installation and deinstallation command.
The behavior is"system" and you can find the two commands in the table below.
|install command||%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -executionpolicy bypass -command .\install.ps1|
|uninstall command||%SystemRoot%\sysnative\WindowsPowerShell\v1.0\powershell.exe -executionpolicy bypass -command .\uninstall.ps1|
There is nothing special in the requirements, just make sure that all your devices are covered.
With the Detection Rule you can upload the prepared script "check.ps1".
We don't have dependencies and supersedence here, you can skip these two steps and make the assignment to the desired group at the end.
That's it, as soon as the app is installed on the end devices, the background image and the lock screen are adjusted and can no longer be changed by the user.
Update wallpaper or lock screen
To update a package that has already been distributed, you can follow the steps almost exactly as for the creation. All you have to do is increase the version in the two files "install.ps1" and "check.ps1".
You can find the version in both packages in the second line:
Once you have done that, you create the Intunewin again.
You then no longer have to recreate the package in Intune, but can replace the existing Intunewin and detection.
To do this, edit the app and update the two files:
Then save the package again and wait until the update has been distributed.
Remove wallpaper and lock screen
As long as the wallpaper and/or lock screen settings are set, the user cannot change them. If you no longer want this, you can change the assignment of the app to "uninstall" change.
To do this, open the app and edit the "Assignments" at the bottom:
Setting up the wallpaper and lock screen for devices that aren't licensed under Windows Enterprise isn't easy, but it can be done. The only advantage I see with this solution is that the customer does not have to publish the image on a web server.
Of course, I would wish that these settings for wallpaper and lock screen could also be made for "Microsoft 365 Business Premium" customers via the Settings Catalog in Intune...
But once the whole thing is set up, it doesn't really matter.