How to deploy Lockscreen with Microsoft Intune

Deploying a Lock Screen Policy with Microsoft Intune: A Complete Guide

Welcome to our guide on deploying a lock screen policy using Microsoft Intune! Microsoft Intune is a powerful platform for managing and securing devices across organizations of all sizes. However, deploying a lock screen through Intune may require a bit of attention to detail. In this post, we will walk you through the process of setting up and deploying a lock screen policy, discuss its benefits, and share best practices. Let’s dive in!

What Will We Set Up?

While Microsoft Intune doesn’t offer a built-in configuration specifically for deploying lock screens, there are various methods you can use. For example, one option is to store the lock screen image on Azure Blob Storage, though this could incur additional monthly costs.

In this guide, we will explore a practical approach where we use a Win32 app to copy the lock screen image to the local client. In the final step, we will create a configuration profile to set the background image. This method ensures a seamless deployment and installation on the client devices.

How to Deploy a Lock Screen with Microsoft Intune via Win32 File

Deploying a lock screen policy using Microsoft Intune can be done using a Win32 app, which allows you to push custom lock screen images to client devices. Since there is no native configuration for lock screens in Intune, this method ensures a smooth, cost-effective deployment.

Here’s a step-by-step guide to deploying a lock screen using a Win32 file:

Step 1: Prepare the Lock Screen Image

1. Create or choose a lock screen image:
   • Ensure the image is of the right size and format (e.g., PNG or JPEG).
   • For Windows devices, 1920×1080 is a good resolution for most screens.
2. Host the image:
   • Place the lock screen image in a location accessible by the devices. For this tutorial, we’ll assume the image is stored locally on your machine.

Step 2: Create a Win32 App to Deploy the Lock Screen Image

1. Convert the Lock Screen Image into a .intunewin Package

To deploy the image via Intune, you’ll need to package the image into a .intunewin file. This is necessary for all Win32 app deployments in Intune.

1. Download and install the Microsoft Win32 Content Prep Tool from the Microsoft website.
2. Use the tool to package the lock screen image:
   • Run the IntuneWinAppUtil.exe tool.
   • Specify the path to your image (e.g., lockscreen.jpg) and the output directory.
   • The tool will create a .intunewin package, which can be uploaded to Intune.

2. Upload the Win32 App Package to Intune

1. Go to the Microsoft Intune Admin Center at https://endpoint.microsoft.com.
2. Navigate to Apps → All Apps → + Add.
3. Select Win32 app as the app type.
4. Click Select and upload the .intunewin file created in the previous step.
5. Fill in the app details (name, publisher, etc.).

Step 3: Configure the Installation Command

To copy the lock screen image to the client machine, you need to configure the installation command.

1. Under Program settings, in the Install Command field, enter the following:

   powershell.exe -ExecutionPolicy Bypass -File install-lockscreen.ps1
   

   Where install-lockscreen.ps1 is a PowerShell script that will be responsible for copying the lock screen image to the appropriate directory on the device.

Example of the PowerShell Script:

Here’s a simple script to copy the lock screen image to the C:\Windows\System32\oobe\info\backgrounds folder (make sure the folder exists before executing):

$lockscreenPath = "C:\Windows\System32\oobe\info\backgrounds\lockscreen.jpg"
$sourcePath = "C:\path\to\lockscreen.jpg"  # Change this to the path of your lockscreen image
Copy-Item -Path $sourcePath -Destination $lockscreenPath -Force

2. Place the PowerShell script in the same folder as your lock screen image during the packaging process.

Step 4: Create a Configuration Profile to Set the Background

1. After the lock screen image is copied to the local client, you need to set it as the lock screen background.
2. Navigate to Devices → Configuration Profiles → + Create Profile.
3. Select Windows 10 and later as the platform and choose the Device Restrictions profile type.
4. In the Device Restrictions settings, configure the following:
   • Lock screen settings: Set the custom lock screen image path, typically C:\Windows\System32\oobe\info\backgrounds\lockscreen.jpg.

Step 5: Assign the Win32 App and Profile to Devices

1. Assign the Win32 App (lock screen image package) to the desired device or user group.
2. Go to the Assignments section and choose the devices or users you want to apply this lock screen policy to.
3. Similarly, assign the Configuration Profile to ensure the background is set correctly.

Step 6: Monitor the Deployment

1. Go to the Monitor section in the Intune Admin Center to track the deployment status.
2. Check the Device Configuration and App Deployment reports to ensure the lock screen image is successfully applied on the devices.

Conclusion

By following these steps, you can successfully deploy a lock screen image to Windows devices using Microsoft Intune via a Win32 app package. This method provides flexibility and ensures a seamless deployment process for lock screen settings across your organization’s devices.

Let me know if you’d like further assistance with this process!