Lock screen images Intune deployment guide
Deploy Windows lock screen images via Intune using the Windows Branding Tool. This page covers how to manage and deploy lock screen images Intune-wide across your Windows 10 and Windows 11 device fleet without PowerShell scripting. Lock screen images Intune deployment supports both landscape and portrait orientations automatically. Learn more about deploying Win32 apps with Microsoft Intune on the official Microsoft documentation site. The Windows Branding Tool is the most affordable solution for lock screen images Intune deployment at just $1 USD per device per year.
Deploy Windows lock screen images via Intune — portrait & landscape
Deploy correctly sized lock screen images across your entire Windows device fleet using Microsoft Intune or MECM. No PowerShell. No Group Policy. No wrong images on portrait screens. Just consistent, on-brand lock screens on every device.
Lock screen images are harder to manage than they look
Most organisations either use a single landscape image that looks wrong on portrait screens, or they skip lock screen branding entirely because the native Intune PersonalizationCSP only accepts one image regardless of orientation. The result is stretched images on kiosk screens, blank lock screens on vertical displays, and IT teams maintaining PowerShell workarounds that break with every Windows update.
The Windows Branding Tool solves this by packaging your lock screen images into a Branding Package that detects each device's screen orientation at runtime and deploys the correct image automatically. One deployment, every screen covered.
The right lock screen on the right screen — automatically
Unlike the native Intune PersonalizationCSP which accepts a single image URL, the Windows Branding Tool assigns the correct lock screen image based on each device's actual screen configuration at deployment time.
Landscape screens
Standard laptops, desktops, and widescreen monitors. Deploy a high-resolution landscape lock screen that fills the screen correctly across 1080p, 1440p, and 4K displays without stretching or cropping.
Portrait screens
Vertical kiosk screens, rotated monitors, and point-of-sale displays. A portrait-oriented image is automatically selected when the main screen is in vertical orientation — no additional configuration required.
What organisations display on their lock screens
Corporate branding
Display your organisation's logo, brand colours, and approved imagery on every device lock screen. Reinforce brand identity at every touchpoint without user involvement.
Legal disclaimer
Government agencies and regulated industries use lock screens to display acceptable use policies and legal notices before login — a compliance requirement for many security frameworks including ISO 27001.
Seasonal messaging
Update lock screen images for campaigns, events, or internal communications. The Campaign Manager lets you schedule when each Branding Package activates — no re-deployment needed.
Four steps from image to deployed lock screen
Prepare your images
Create landscape and portrait lock screen images in your brand guidelines. The tool supports multiple resolutions and selects the best match for each screen automatically.
Import into the tool
Open the Windows Branding Tool and import your lock screen images. Preview how each image will appear on landscape and portrait screens before packaging.
Create a Branding Package
The tool generates a self-contained silent installer — an MECM-ready executable and an .intunewin file for Intune Win32 app deployment.
Deploy via Intune or MECM
Distribute the Branding Package as a standard Win32 application. It installs silently, detects screen orientation, and sets the correct lock screen image locally on each device.
Everything needed to deploy lock screen images via Intune at scale
- Landscape lock screen image support
- Portrait lock screen image support
- Automatic orientation detection at runtime
- 4K and high-DPI screen support
- No PowerShell scripting required
- No Group Policy or PersonalizationCSP needed
- Deploy via Intune as a Win32 app
- Deploy via MECM as a standard application
- Fully local execution — no internet required post-deploy
- Pending reboot notification on lock screen
- Up to 12 Branding Packages per device simultaneously
- Campaign manager for scheduled lock screen rollouts
One subscription. Five branding capabilities.
Your Branding Package licence covers lock screen images, desktop backgrounds, Outlook signatures, Teams backgrounds, and video screensavers — all for a single per-device price. Minimum 500 devices. Deploy using your existing Intune or MECM infrastructure.
per device
per year
Have a question about deploying lock screen images via Intune or MECM? Ask below — we respond to every question.
