reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PersonalizationCSP" /v LockScreenImageStatus /t REG_DWORD /d 1 /f reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PersonalizationCSP" /v LockScreenImagePath /t REG_SZ /d "\\path\\to\\image" /f reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\PersonalizationCSP" /v LockScreenImageUrl /t REG_SZ /d "\\path\\to\\image" /f
Users are allowed to change their lock screen background, unless you apply a reg key which specifically blocks it.
This isn't quite my experience. The registry entries are some of those set by the Personalisation csp as referenced by
Personalization CSP. They seem to function on Windows 10 and 11. They force the lock screen for all users, and don't offer users any opportunity to change the lock screen.
Note the caveat:
"Personalization CSP is supported in Windows Enterprise and Education SKUs. It works in Windows Professional only when SetEduPolicies in
SharedPC CSP is set, or when the device is configured in
Shared PC mode with BootToCloudPCEnhanced policy."
Despite this caveat the lock screen image is forced. However, it appears to leave the original lock screen unaffected, although you can't see it. The default lock screen is Windows Spotlight, and this will continue to operate - collecting new images and occasionally putting a notification on your fixed lock screen about the new Spotlight image you can't see. You can prevent this by using the appropiate user registry entries to remove the Spotlight lock screen.
I've seen suggestions of additional registry entries to make it appear that SetEduPolicies is set. None worked for me.
Assuming you don't have an InTune/MDM setup, there are other ways of setting SetEduPolicies. The simplest way to be sure you have done this correctly is to create a Provisioning Package with Windows Configuration Designer and install it.
Windows Configuration Designer - Free download and install on Windows | Microsoft Store . You need to create an advanced package.
If you do this on an otherwise unmodified Windows 10/11 Pro (I haven't tested on Home editions) and look at lock screen options, Windows Spotlight is not available. So, the lock screen default is picture and no user level action is required to keep Windows Spotlight out of the lock screen completely.
Shared PC technical reference lists additional policy settings to block some windows tips and consumer experiences that are set. These normally don't work on Pro (or Home) editions of windows, but do seem to work. I would regard both, particularly "Turn off Microsoft consumer experiences" as desirable.
There's an extra possibility for Windows 11 Pro devices.
Education Policy CSP This will "declare this OS as an education environment." There are suggestions that this can be achieved by a simple registry edit:
Code:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Education]
"IsEducationEnvironment"=dword:00000001
Elsewhere
EducationSettings.IsEducationEnvironment Property (Windows.System.Profile) - Windows apps shows how to check IsEducationEnvironment is set.
This translates into Powershell as:
Code:
[Windows.System.Profile.EducationSettings, Windows.System.Profile, ContentType = WindowsRuntime]::IsEducationEnvironment
(on one line) and will show true if you have SetEduPolicies properly set On Windows 10 or 11 Pro, or IsEducationEnvironment properly set, or the registry entry in Windows 11 Pro. (no testing by me on any Home edition)
Setting the registry entry seems to be enough to enable the group policy "Turn off all Windows spotlight features" to turn off tips, Windows Spotlight on the lock screen. and the Consumer Experiences (at least at new account creation), as well as disabling Spotlight on Background, which is the only part that works on Pro. I haven't investigated this any further yet.
Clearly there is more to be said about MDM and how to apply those policies.