Windows – Wallpaper in Windows 7 locked down by domain group policy

desktop-customizationdomaingroup-policywindows 7

I am in a situation where my wallpaper is locked to a specific image on my work computer via group policy. I can't change it via the Personalization settings since it is grayed out and says it has been set by the system administrator.

Anyone know some local GPO and/or registry hackery I can do to override the domain's policy? I could probably get away with logging in under a local account for this, but I want that to be a last resort.

Best Answer

I was able to get around by going to this location in the registry:

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System

Inside, there's a key called Wallpaper. I deleted it and re-set the desktop background, and it worked.

You'll have to do that every time you log on though, as group policy refreshes itself. (It can also be set to refresh automatically.)

Related Solutions

Advanced Security Audit Policy Not Applying To Win7

In Windows 7 / Vista:, run start > cmd.exe.

To list the options:

c:\auditpol /list /subcategory:*

Category/Subcategory

System

Security State Change
Security System Extension
System Integrity
IPsec Driver
Other System Events

Logon/Logoff

Logon
Logoff
Account Lockout
IPsec Main Mode
IPsec Quick Mode
IPsec Extended Mode
Special Logon
Other Logon/Logoff Events
Network Policy Server

Object Access

File System
Registry
Kernel Object
SAM
Certification Services
Application Generated
Handle Manipulation
File Share
Filtering Platform Packet Drop
Filtering Platform Connection
Other Object Access Events
Detailed File Share

Privilege Use

Sensitive Privilege Use
Non Sensitive Privilege Use
Other Privilege Use Events

Detailed Tracking

Process Creation
Process Termination
DPAPI Activity
RPC Events

Policy Change

Audit Policy Change
Authentication Policy Change
Authorization Policy Change
MPSSVC Rule-Level Policy Change
Filtering Platform Policy Change
Other Policy Change Events

Account Management

User Account Management
Computer Account Management
Security Group Management
Distribution Group Management
Application Group Management
Other Account Management Events

DS Access

Directory Service Access
Directory Service Changes
Directory Service Replication
Detailed Directory Service Replication

Account Logon

Credential Validation
Kerberos Service Ticket Operations
Other Account Logon Events
Kerberos Authentication Service

Then use auditpol /set ... to set value. For more help, use auditpol /?.

Related Question