Solved

Issues setting wallpaper with group policy

Posted on 2009-05-18
10
1,885 Views
Last Modified: 2012-05-07
I have a Server 2003 domain and I'm trying to set a group policy to force a wallpaper.  I have a GPO and I assigned it to the OU's I want it to be enforced on.  It is a .bmp located in a UNC path.  The wallpaper will not always show up for the users it is supposed to.  It always show up in the preview window if you right click the desktop > properites and the policy shows as applied in rsop.msc.  I've tried every combination of active desktop on/off, only allowing bitmaps, etc and I just can't seem to get this to apply consistently.  The bmp is 4mb and I'm thinking that might be some of the issue.
0
Comment
Question by:pscharf
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 3
  • 2
  • +1
10 Comments
 
LVL 16

Expert Comment

by:speshalyst
ID: 24412428
can you try with a different pic file ? just to check if the cause of the problem is this specific .bmp
 
0
 

Author Comment

by:pscharf
ID: 24412711
I've been able to get it to apply, but only under the following circumstances:

Enable Active Desktop - Enabled
Disable Active Desktop - Disabled
Active Desktop Wallpaper - \\server\share\file.bmp

From my understanding I shouldn't need to use Active Desktop for a bmp.  Also with active desktop on icon text is not transparent.
0
 
LVL 19

Accepted Solution

by:
PeteJThomas earned 500 total points
ID: 24412720
I would say that is a little large for a background file! Have you tried simply opening the pic, resaving it as a .jpg (this will massively reduce it's size at the potential cost of quality), set it manually as a background to ensure quality is acceptable, then use that instead?

Anyway, we use a GPO to set a background as well, so thought I'd share exactly how we do it...

Basically we have a combination of a policy setting and a logon script (through the same GPO) to achieve it. The policy setting is 'Prevent Changing of Wallpaper' - Obvious enough.

Then what actually sets the background is a simple batch script containing the info in the attached txt file...

Anyway this method works perfectly for us (around 500 PCs/Laptops), the ONLY problem is that regardless of the 'prevent...' setting, there are work arounds that allow the users to change their background. This is a known issue, where if users right-click an image file and choose 'Set as desktop background' it still works ok...

HTH, any questions about the script itself, just ask...

Pete
Background.txt
0
Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.

 
LVL 19

Expert Comment

by:PeteJThomas
ID: 24412873
To elaborate on the first line in the txt file, the command we use is in the following syntax:

\\<FULL domain name>\SYSVOL\<FULL domain name>\Policies\<policy folder>\User\Scripts\Logon\robocopy (the 'logon' folder contains an executable called robocopy, a free copy utility)

At this point there's a space, so continuing on:

...\robocopy \\<FULL domain name>\SYSVOL\<FULL domain name>\Policies\<policy folder>\User\Scripts\Logon\Background (there is a folder called 'Background' in the same place as the robocopy executable, and this folder simply contains the image file itself)

Another space, so:

...\Background "%userprofile%\local settings" /r:1 /w:1 /np /xf thumbs.db

The switches at the end are robocopy switches, (robocopy has an extensive list of switches) defined as follows:

/r:1 = number of retries on failed copies set to 1
/w:1 = seconds to wait between retries set to 1
/np = no progress (do not show % copied during copy)
and /xf thumbs.db = exclude file thumbs.db in the copy

I know that might look complicated but it's actually extremely simple and effective...
0
 

Author Comment

by:pscharf
ID: 24414059
Thanks for the script Pete.  I'm trying to avoid doing that because it seems to me that group policy should be able to handle this.  I've already pushed the bitmap to peoples local directories in preparation for not being able to fix GP.

So just to clarify there is no way to have a bitmap with active desktop disabled through group policy?
0
 
LVL 19

Expert Comment

by:PeteJThomas
ID: 24416072
I've personally never seen it done without or script or with active desktop - Not saying it can't be done though, just that it's always been done with scripts in the companies I've worked for. Apparently they only 'true' way to lock it down so people can't change it is to use active desktop, but I'd rather settle for letting them be able to change it if they can figure out how... (and the script changes it back again at next log on anyway).

So I've been looking and found this - "In gpedit, the "Active Desktop Wallpaper" setting in User Configuration|Administrative Templates|Desktop|Active Desktop does set the background. Ignore the fact that it's in the Active Desktop section, as it still works with Active Desktop disabled. Active Desktop only needs to be enabled if using JPG or HTML for the background." (from http://www.experts-exchange.com/Operating_Systems/WinXP/Q_21392666.html)

Not sure if that's meant to be .bmp instead of .jpg though? As it would seem to suggest that you should be able to do it the way you want with a bmp?

Did you try using a smaller image by the way?
0
 

Author Comment

by:pscharf
ID: 24416098
I have tried with a smaller image.  The background will NOT show up unless active desktop is enabled, which for some god forsaken reason when done via GP also adds the funny background text to an icon.  Thank you very much for your help.
0
 
LVL 19

Expert Comment

by:PeteJThomas
ID: 24416133
Sorry that didn't help much - If you still wanna keep trying, I would probably convert the image into various formats, and try each one. By the sounds of it you only need active desktop enabled if you're using certain image types, so maybe it's just a case of finding the right image type.

Either way, thanks for the points, and of course if you choose to use the script, any questions just ask.

Good luck,

Pete
0
 

Expert Comment

by:ksiva83
ID: 24838346
Hi Pscharf,

As per ur reply...

  • pscharf:
  • I've been able to get it to apply, but only under the following circumstances:
  • Enable Active Desktop - Enabled
  • Disable Active Desktop - Disabled
  • Active Desktop Wallpaper - \\server\share\file.bmp
  • From my understanding I shouldn't need to use Active Desktop for a bmp.  Also with active desktop on icon text is not transparent.
Ill suggest here to change the GP settings for Disable Active Desktop.... It must be ENABLED which will certainly allow you to set .bmp file as background....

Hope this will help you with out any scripts...
0
 

Expert Comment

by:ksiva83
ID: 24838364
Hi Pscharf,

As per ur reply...

  • pscharf:
  • I've been able to get it to apply, but only under the following circumstances:
  • Enable Active Desktop - Enabled
  • Disable Active Desktop - Disabled
  • Active Desktop Wallpaper - \\server\share\file.bmp
  • From my understanding I shouldn't need to use Active Desktop for a bmp.  Also with active desktop on icon text is not transparent.
Ill suggest here to change the GP settings for Disable Active Desktop.... It must be ENABLED which will certainly allow you to set .bmp file as background....

Hope this will help you with out any scripts...
0

Featured Post

[Webinar] Learn How Hackers Steal Your Credentials

Do You Know How Hackers Steal Your Credentials? Join us and Skyport Systems to learn how hackers steal your credentials and why Active Directory must be secure to stop them. Thursday, July 13, 2017 10:00 A.M. PDT

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Active Directory security has been a hot topic of late, and for good reason. With 90% of the world’s organization using this system to manage access to all parts of their IT infrastructure, knowing how to protect against threats and keep vulnerabil…
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
This video shows how to use Hyena, from SystemTools Software, to update 100 user accounts from an external text file. View in 1080p for best video quality.

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question