Windows 10 will give you the ability to setup a picture for your account on the computer. We have this same capability with our G-Suite, so we decided to turn off this feature and just set the “Sinchak” Tigre as the default user image for everyone. Once this is set, then the user cannot change the image.
This can be done with 3 simple setups. 1) Create the images and place them in a network share folder, 2) Create a group policy that sets the default image lock down, and 3) Use PDQ Deploy to send the images to the computer.
Creating the Images
We made images for each size and type and copied them to the computers. There was conflicting documentation on the Internet about this, and even the GPO says to use .jpg files, but we just duplicated what was in the computer folder.
We placed these images in the \\tpaw-01\installs\DesktopBackground\ folder which is available to all computers on the network.
The Group Policy
We created a new group policy and placed it at the top level next to the default domain GPO. The settings are:
Computer \ Policies \ Administrative Templates \ Control Panel \ User Accounts \ Apply the default account picture to all users
Set this policy to enables, and now the users cannot change the default image and the computers will not copy a new image for each new user.
Copy images with PDQ Deploy
We create a PDQ Deploy job that copies all of the images to the computer and places them in the %PROGRAMDATA%\Microsoft\User Account Pictures\
This job needs to be ran on new installs of Windows 10