How To Prevent Users From Changing Lock Screen And Logon Image In Windows 10?

Windows settings come with a lot of features that users can personalize according to their needs. The lock screen and logon image can also be changed in the Windows settings easily. However, these settings can also be disabled through Local Group Policy. It is a great idea for enterprises or admins to keep these settings protected from public users. This will prevent users from changing the background image that is shown when the system is locked or on the logon screen.

We have also included a registry method through which you can modify these settings because the Group Policy is not available on Windows 10 Home Editions.

Restricting Lock Screen settings

Prevent Changing Lock Screen and Logon Image

Changing the lock screen or logon image settings is enabled by default in Windows. This is one of the common settings that should not be disabled unless needed. Users can disable the lock screen and logon image settings and enable it anytime through the below methods. If you disable this setting, the user will not be able to change their lock screen and logon image, and they will instead see the default image. Both of the below methods work the same; however, the user can choose whichever tools they have and are familiar with.

Method 1: Preventing Customization of Lock Screen through Local Group Policy

In this method, we will be using the Local Group Policy Editor to disable the lock screen settings. The Local Group Policy Editor can be used to configure and manage the Windows operating system. Most of the policies already exist in Local Group Policy, so users just need to configure it.

Note : The Local Group Policy Editor is only available on Windows 10 Enterprise, Windows 10 Pro, and Windows 10 Education editions. If you have a different Windows 10 version, then directly jump to method 2.

If the Local Group Policy Editor is available on your system, then follow the below steps to prevent users from changing the lock screen and logon image:

1. Hold the Windows key and press R to open the Run dialog. Now, type “ gpedit.msc ” and press Enter to open the Local Group Policy Editor . Choose Yes to agree to the UAC (User Account Control) prompt. Opening Local Group Policy Editor
2. Use the left pane in the Local Group Policy Editor to navigate to the following location: Computer Configuration\Administrative Templates\Control Panel\Personalization\ Opening the policy
3. Double-click on the Prevent changing lock screen and logon image policy in the right pane. This will open a new window for the specific policy, now modify the toggle from Not Configured to Enable . Then, click on the Apply/Ok button to save the changes. Enabling the policy
4. Now the settings for lock screen and logon image in the Windows settings will be disabled and users will be prevented from changing it.

Method 2: Preventing Customization of Lock Screen through Registry Editor

Another way to prevent users from customizing the lock screen or logon image is by using Registry Editor. Unlike the Local Group Policy editor, this requires a bit extra steps from users. Some of the keys/values will be missing in Registry Editor, so users need to create it manually. Follow the below steps to prevent users from customizing the lock screen and logon image through Registry Editor:

1. Press the Windows + R keys together to open a Run dialog box. Type “ regedit ” and press Enter to open Registry Editor . Choose Yes to agree to the UAC (User Account Control) prompt. Opening the registry editor
2. Navigate to the following key using the left pane in the Registry Editor window: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization
3. Search for a value named NoChangingLockScreen on the right pane. If it doesn’t exist, then create a new value named NoChangingLockScreen by clicking anywhere on the right pane and choosing New > DWORD (32-bit) Value . Creating new value
4. Now double-click on the NoChangingLockScreen value and set the Value data to 1 . Click on the Ok button to apply the changes. Changing the value data
5. Finally, after all the modifications have been made, make sure to restart your computer and let the changes take effect.

How to Fix “Printer is in an error state” Issue?

The “ Cannot change fingerprint or PIN ” problem in Windows 11 happens when the options to change these settings are greyed out in Settings → Accounts → Sign-in options. Even if you are the administrator, you can’t update your Windows Hello credentials. You might also see a message like “ This option is temporarily unavailable. ”

Can’t disable PIN or Fingerprint on Windows 11

This usually happens because Windows Hello’s stored data (in the Ngc folder) is damaged or not in sync. Other reasons include security rules set by your workplace or school, connected work accounts, or restrictions set in the registry or group policy.

Now that you’re aware of the potential causes, let’s go through some steps that have helped other users fix or work around this problem:

1. Change the PIN or Fingerprint the Conventional Way

If your goal is to remove the fingerprint or PIN without setting up another sign-in method, please note that this is not possible on Windows 11.

Windows 11 requires you to have at least one Sign-in option enabled. The Remove button will remain grayed out if you only have one active sign-in method.

Can’t disable PIN or Fingerprint on Windows 11

For example, the Remove button for your PIN will stay unavailable until you add a different sign-in option (like Facial Recognition, Fingerprint, or a Security Key).

If you want to stop using your PIN or Fingerprint, you’ll need to set up an additional way to sign in.

Below are step-by-step instructions to set up a new sign-in option and then remove your current one:

1. Press Windows key + I to open the Settings menu in Windows 11.
2. Inside the Settings menu, click on Accounts from the vertical menu on the left. Accessing the Accounts menu Note: If the left menu is hidden by default, click the menu button (top-left corner) to reveal it.
3. Once in the Accounts menu, move to the right-hand section of the screen and select Sign-in options. Accessing the Sign In Options menu
4. Now, choose which sign-in method you’d like to set as a fallback. Sign-in Options Note: Your available options depend on your device. If your PC doesn’t support facial recognition or you don’t have a security key, you can switch between PIN and fingerprint.
5. After you pick your new sign-in method, follow the on-screen instructions to set it up.
6. Once your second sign-in option is set, you’ll be able to click the Remove button to get rid of your previous sign-in method. You can also choose Change PIN or Change Fingerprint to update, rather than remove, your sign-in credentials. Modify the current PIN or remove one of the configured sign-in options

2. Remove PIN or Fingerprint Requirement by Using a Local Account

If you want to completely remove all sign-in options like PIN or Fingerprint, you will have to switch to a local account .

We generally don’t recommend this unless you really need to, as it can limit the functionality of some built-in Windows features (like Windows Update and the Microsoft Store).

If you still want to remove your PIN or Fingerprint sign-in, you’ll need to set up a local account with a password instead. Keep in mind, this means you’ll need to stop using your Microsoft account on your PC.

Important: This method isn’t available if you’re enrolled in the Windows Insider program.

To change from a Microsoft account with PIN or fingerprint to a local password, follow these steps:

1. Press Windows + I to open the Settings menu in Windows 11.
2. In the Settings menu, click on Accounts from the menu on the left. Accessing the Accounts menu Note: If you don’t see the left menu, click the menu icon (top-left corner).
3. Inside Accounts , click on Family & other users on the right-hand side. Accessing the Family and other users tab
4. In the Family & other users tab, check for any accounts listed under Other users. If you find any, remove them before moving on.
5. Next, return to the main Accounts menu and click on Your info on the right. Accessing the Your Info tab
6. Scroll down to Account Settings and click on Sign in with a local account instead . Sign in with a local account instead
7. On the next screen, click Next .
8. When prompted, enter your current PIN or use your fingerprint as requested. Inserting the PIN
9. Then, you’ll be asked to create a username and password for your new local account, along with a password hint in case you forget. Configure the local account
10. Finally, click Sign out and finish to complete the switch.