MCTS to MCITP , 70-351 , 70-089 , 70-236 , 70-640 , 70-642 , 70-646 , 70-630 , 70-285 , 83-640: September 2010

Thursday, September 9, 2010

Restrict User Desktop to Company Default WallPaper ;


In an IT based environment people used to change their Desktop WallPaper Day by Day which isn’t looks like Professionals. So, CEO of the Company Ask you to Deploy a Company’s Default WallPaper whenever user logon to the System. This can be Accomplished by Apply a Windows Server Group Policy Feature which enables IT Administrator to fullfil the Task Quite Simple and more Easily. This User Based Group Policy deploys default page which you apply whenever user logon . And Because this policy is applied to User Configuration so from where ever user logon to Domain from Any Computer he will get the Default WallPaper Set by You. Group Policy can be applied to a specified Organization Unit (OU) and even to the Entire Domain but its better to Apply as per OU.
This Step by Step Configuration will guide you to Deploy the Policy more Easily.
Open Active Directory Users and Computers and Navigate to the OU on which you want to apply the Group Policy.














Right Click on OU and click Properties ( In my Case it is the Test OU )















Move to the Group Policy Tab and Click on “New” to create a new Group Policy and Give it a Name so that you can remember it while using or apply to another OU. This Group will be different from your Default Group Policy. You can also Block the Default Group Policy if you don’t want to Apply. See in the Below Image you will see at the Bottom “ Block Policy Inheritance “. Check Mark if you want to Block but in this Case it is not required so we move ahead Making a New Policy.














Now Double Click on the Policy ( Desktop ) and navigate to User Configuration à Administrative Templates à Desktop à Active Desktop.














Double Click “Active Desktop WallPaper” and Click Enable to apply. Also specify the Path where the Default Image is located. You can Also Set the Wallpaper Style Whether Stretch,Center or Tile.














Click Apply and Close all Boxes.
Goto Run and Type
gpupdate /force
This was the Image I used as a Default Wallpaper.
















Verification :
Now logon to a client Computer Using the User of the Organization Unit and See if the Policy has applied successfully or not. In my case I have a “Test User” so I logged in through “Test”.














Wow, That was Easy J
Also Check is the user Restricted to change to Default Wallpaper.


OpenDisplay Properties” , Goto Desktop and check thatBrowseButton is Disabled.

















This ends the Article on “ Restricting User’s Desktop WallPaper

Note:-

Do not make the User a Member of Local System Administrator Group, the Key to Success is to give User previliges as less as possible.
User Should Always be a Part of Power User Group . This way user will not be able to do any registry changes to Enable his/her Desktop Again.

Thanks,
Himayat Ullah Khan.
CCNA,MCTS,MCP