1607 account picture on lock screen

[ADMaster]

Hi All,

I have several branding scripts that i used for 1511, one of them replaced the images in the user accounts picture folder so all users have the school shield as their profile picture.

 

I did a fresh install of 1607 on a VM to see what changed, and the profile picture does not appear on the lock screen.

 

I've looked in the folder and all images were replaced correctly, the profile pictures show up after login, just not before login.

 

When a user presses ctrl alt del they get the grey blank face. My Google-Fu is failing, is there any way to get the shield back on the sign in / lock screen.

 

Thank you,

[Blue_Cookeh]

I'm +1ing this problem. Our user account picture (the school's logo) is appearing everywhere else just fine, and still works on our old Win10 image but we're just getting the standard Windows 'alien' on 1607.

[victory2012]

grrr why did they change it, i have same problem cant work it out!

[Blue_Cookeh]

It's such an odd problem. It works perfectly if I build a Hyper-V virtual machine with it (we use SCCM with a thin image) but as soon as I put it on a batch of our new Lenovo X260s the image stops working, even though it exists in the all right directories.

[mullet_man]

Hi All,

I have several branding scripts that i used for 1511, one of them replaced the images in the user accounts picture folder so all users have the school shield as their profile picture.

 

I did a fresh install of 1607 on a VM to see what changed, and the profile picture does not appear on the lock screen.

 

I've looked in the folder and all images were replaced correctly, the profile pictures show up after login, just not before login.

 

When a user presses ctrl alt del they get the grey blank face. My Google-Fu is failing, is there any way to get the shield back on the sign in / lock screen.

 

Thank you,

 

I had the same issue, there is a GP that needs setting for it to apply on 1607.

 

It's

 

Computer Configuration -> Administrative Templates ->

Control Panel -> User Accounts -> Apply the default user logon picture to all users

 

Enable that and it should set.

[snagrat]

Hi All,

I have several branding scripts that i used for 1511, one of them replaced the images in the user accounts picture folder so all users have the school shield as their profile picture.

 

I did a fresh install of 1607 on a VM to see what changed, and the profile picture does not appear on the lock screen.

 

I've looked in the folder and all images were replaced correctly, the profile pictures show up after login, just not before login.

 

When a user presses ctrl alt del they get the grey blank face. My Google-Fu is failing, is there any way to get the shield back on the sign in / lock screen.

 

Thank you,

 

Would love to see those scripts if you fancied sharing them

[victory2015]

I had the same issue, there is a GP that needs setting for it to apply on 1607.

 

It's

 

Computer Configuration -> Administrative Templates ->

Control Panel -> User Accounts -> Apply the default user logon picture to all users

 

Enable that and it should set.

 

that does n help my problem as i want replace the image on the logon screen not the image for all users, our users have there ad photos when they logon so i cannot set this setting.

[timbo343]

This may work for 1511 too, just checked my Group policy.

 

I spent ages trying to get this to work, so now we just need yo copy a logo via group policy to the correct location .

[Blue_Cookeh]

This may work for 1511 too, just checked my Group policy.

 

I spent ages trying to get this to work, so now we just need yo copy a logo via group policy to the correct location .

 

 

1511 worked 100% great for us, without this GPO option set. I've just set it on our network so will check it on a problem PC on Mon/Tues.

[Asgard]

Works for me on 1511.

 

 

Got rid of the grey circle so it matches our background / corporate "college blue"

@snagrat relevant files on a fileshare then GPO machine policy files option to copy them over the existing ones[emoji108]🏽

 

Drop me a PM if you want and I'll send over the PS files for ours [emoji106]

Edited August 21, 2016 by Asgard

[ADMaster]

Thanks for the GP that worked. I've never had it set before and it worked just fine in 1511.

 

Here is my branding script.

 

Put your wallpaper in with the default wallpapers, create your theme and export it into a .theme file.

 

Put the script, wallpaper, theme file, and user account pictures all in the same folder.

 

I've also added the reg key to not show the first run UI for defender 1607.

 

 

 #===Start Script===Start-Transcript -Path "$OSDISK\branding.log" 
#New-PSDrive -PSProvider Registry -Name HKU -Root HKEY_USERS
$Wallpaper = "yourwallpaper.jpg" 
$OSDISK=$env:OSDISK


REG LOAD HKLM\DEFAULT $OSDISK\Users\Default\NTUSER.DAT






# copy the OEM bitmap 
If (-not(Test-Path $OSDISK\windows\system32\oobe\info\backgrounds)){New-item $OSDISK\windows\system32\oobe\info\backgrounds -type directory}



copy-item $PSScriptRoot\user.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-192.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-48.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-40.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-32.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\guest.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user.bmp "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\guest.bmp "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
Move-Item  "$OSDISK\Windows\Web\Screen\img100.jpg" "$OSDISK\Windows\Web\Screen\img100-1.jpg" 








copy-item $PSScriptRoot\$Wallpaper "$OSDISK\windows\system32\oobe\info\backgrounds\backgroundDefault.jpg" 
copy-item $PSScriptRoot\$Wallpaper "$OSDISK\Windows\Web\Screen\img100.jpg" 
copy-item $PSScriptRoot\$Wallpaper "$OSDISK\Windows\Web\Wallpaper\Windows\$wallpaper"










# make required registry changes 
$strPath2 = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Background" 
$strPath5 = "HKLM:\DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes"
$defenderpath = "HKLM:\DEFAULT\SOFTWARE\Microsoft\Windows Defender"
Set-ItemProperty -Path $defenderpath -name UIFirstRun -value 0 


Set-ItemProperty -Path $strPath2 -Name OEMBackground -value 1








Copy-Item $PSScriptRoot\yourtheme.theme "$OSDISK\Windows\Resources\Themes"


Set-ItemProperty -Path $strPath5 -Name InstallTheme -Value  %SystemRoot%\resources\Themes\yourtheme.theme




[gc]::Collect() # necessary call to be able to unload registry hive
REG UNLOAD HKLM\DEFAULT 





Stop-Transcript

[ADMaster]

A minor edit to the script to create the windows defender path, and I can't edit the original post.

 

Added the new item path between $defenderpath and set item property.

 

 

 

 

$defenderpath = "HKLM:\DEFAULT\SOFTWARE\Microsoft\Windows Defender"


New-Item -Path HKLM:\DEFAULT\SOFTWARE\Microsoft -Name "Windows Defender" –Force


Set-ItemProperty -Path $defenderpath -name UIFirstRun -value 0 

 

There are also a few paths and file names that will need changed to suit your environment.

Here is the whole thing again.

 

#===Start Script===
Start-Transcript -Path "$OSDISK\branding.log" 


$Wallpaper = "yourwallpaper.jpg" 
$OSDISK=$env:OSDISK


REG LOAD HKLM\DEFAULT $OSDISK\Users\Default\NTUSER.DAT


# copy the OEM bitmap 
If (-not(Test-Path $OSDISK\windows\system32\oobe\info\backgrounds)){New-item $OSDISK\windows\system32\oobe\info\backgrounds -type directory}

copy-item $PSScriptRoot\user.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-192.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-48.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-40.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user-32.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\guest.png "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\user.bmp "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
copy-item $PSScriptRoot\guest.bmp "$OSDISK\ProgramData\Microsoft\User Account Pictures" 
Move-Item  "$OSDISK\Windows\Web\Screen\img100.jpg" "$OSDISK\Windows\Web\Screen\img100-1.jpg" 


copy-item $PSScriptRoot\$Wallpaper "$OSDISK\windows\system32\oobe\info\backgrounds\backgroundDefault.jpg" 
copy-item $PSScriptRoot\$Wallpaper "$OSDISK\Windows\Web\Screen\img100.jpg" 
copy-item $PSScriptRoot\$Wallpaper "$OSDISK\Windows\Web\Wallpaper\Windows\$wallpaper"


# make required registry changes 
$strPath2 = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\Background" 
$strPath5 = "HKLM:\DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes"
Set-ItemProperty -Path $strPath2 -Name OEMBackground -value 1


Copy-Item $PSScriptRoot\yourtheme.theme "$OSDISK\Windows\Resources\Themes"


Set-ItemProperty -Path $strPath5 -Name InstallTheme -Value  %SystemRoot%\resources\Themes\yourtheme.theme


#create defender ui reg key
$defenderpath = "HKLM:\DEFAULT\SOFTWARE\Microsoft\Windows Defender"
New-Item -Path HKLM:\DEFAULT\SOFTWARE\Microsoft -Name "Windows Defender" –Force
Set-ItemProperty -Path $defenderpath -name UIFirstRun -value 0 


[gc]::Collect() # necessary call to be able to unload registry hive
REG UNLOAD HKLM\DEFAULT 

Stop-Transcript

[snagrat]

And this script can be pushed through as a GPO startup script or does it have to be done as part of a build process?

[ADMaster]

I run it as part of an SCCM deployment task however, I don't see any reason you could not run it as a startup script.

 

The theme is set per user so anyone who already has a profile will not get the settings as this script modifies the default profile.

 

If you want to brand machines already deployed consider a GPO. The main reason I don't use a GPO is I want users to be able to change it after the fact.