1

I'm searching for a solution to restrict my Active Directory users, so that they can set a desktop wallpaper from only from a selection of 5 different pictures.

Our company has a set of 5 pictures. User should now can select individually one of the 5 pictures for their desktop wallpaper. But no other Pictures should be allowed.

Do you have any ideas?

3

Windows GPOs only would allow you to preset a background image to a given image file and to disable the UI functionality to change it. There is no feature to restrict the choice of available images.

You could just disable the wallpaper changing UI via GPO and let your users set the desired wallpaper by calling a script which would write to the respective registry key (HKCU\Control Panel\Desktop) in the user's profile which might look as simple as

set-itemproperty -path "HKCU:Control Panel\Desktop" -name WallPaper -value "\\domain\Dfs\wallpaper\image1.jpg"

in PowerShell (requires a logoff / logon sequence to take effect).

The trouble with this approach is that a sufficiently smart or knowledgeable user could simply change the registry key value herself to set any wallpaper she likes. If this is a concern, you could try a different, although considerably more complex setup:

  1. set the desktop background to a user-specific path (e.g. an image file in the user's profile) via GPO
  2. remove the user's write/delete access to the directory containing the file and the file itself
  3. providing an interface to replace this file which would be running under a different security context and have the permissions to replace the aforementioned file

An implementation could include a number of scheduled tasks on all of your Windows workstations which would be set up to run in a sufficiently privileged context (e.g. the SYSTEM / LocalSystem account) to replace the currently logged on user's wallpaper image with one of the allowed ones.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.