Disable Windows 10/11 Lock Screen using Intune

In this blog post, we will explore disabling Windows 10/11 Lock Screen using the Intune admin center. The lock screen is the initial screen that appears after powering on your device, preceding the Sign-in page.

You can customize your lock screen by changing the background to a favorite photo or slide show. Additionally, you can select quick status notifications to display upcoming calendar events, social network updates, or other app and system notifications.

If you are still using Windows 10, you may need to press the Ctrl+Alt+Del keys on the keyboard before reaching the sign-in page. In Windows 11, you can either use your mouse to dismiss the lock screen or press any key on the keyboard.

There is currently no built-in option to remove the Windows 11 Lock screen using the Settings App. However, administrators can utilize various alternative methods to disable it for end users, like Intune, Group Policy, or registry editor. I have provided the steps for each of these methods in this post.

Windows 11 Lock Screen

Below is an example of the default Windows 11 lock screen. You will find the Date and Time Information along with the background image, which could be different if you have placed a custom lock screen wallpaper.

Windows 11 Lock Screen
Windows 11 Lock Screen

After dismissing the Lock screen, you will be given the option to enter your password or PIN, depending on the login options configured on your device.

Windows 11 Lock Screen
Windows 11 Lock Screen

Steps to Disable Windows 10/11 Lock Screen using Intune

To disable the Windows 11 Lock screen using the Intune admin center, your devices must be enrolled and managed by Intune. We will be creating a Device configuration profile to achieve the desired result. Let’s go through the steps:

  • Sign in to the Intune admin center.
  • Go to Devices > Configuration profiles.
  • Click on + Create > New Policy.
  • Select Platform as Windows 10 and later.
  • Profile type: Settings Catalog.

Basics

In the Basics tab, you’ll enter details about the device configuration profile, such as its Name and Description.

  • Name – Disable Windows 11 Lock Screen
  • Description: This device configuration profile will disable the lock screen on the target Windows 11 devices.

Configuration settings

Click on + Add settings and search for “lock screen”. Select the category “Administrative Templates\Control Panel\Personlization.” Select the setting “Do not display the Lock screen” to add it to the Configuration settings page.

Steps to Disable Windows 10/11 Lock Screen using Intune
Steps to Disable Windows 10/11 Lock Screen using Intune

Use the toggle switch to enable the setting “Do not display the lock screen” and click on Next.

This policy setting controls whether the lock screen appears for users. If you enable this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see their selected tile after locking their PC. If you disable or do not configure this policy setting, users that are not required to press CTRL + ALT + DEL before signing in will see a lock screen after locking their PC. They must dismiss the lock screen using touch, the keyboard, or by dragging it with the mouse.

about the setting “Do not display the lock screen”
Steps to Disable Windows 10/11 Lock Screen using Intune

Scope tags

Click on Next.

Assignments

You can assign this profile to an Entra security group, including users or devices. For a controlled deployment, it’s recommended to add devices to the group and target it. Once testing is successful and you want to apply the setting to all managed devices, you can also choose to + Add all devices.

Review + Create

On the “Review + Create” tab, review the device configuration profile settings, and then click “Create.”

Sync Intune Policies

The device check-in process might not begin immediately. If you’re testing this policy on a test device, you can manually kickstart the Intune sync from the device itself or remotely through the Intune admin center.

Alternatively, you can use PowerShell to force the Intune sync on Windows devices. Another way to trigger the Intune device check-in process is by restarting the device.

Monitoring the deployment progress

To monitor the deployment progress of a Device configuration profile, follow below steps:

  • Sign in to the Microsoft Intune admin center.
  • Click on “Devices” and then select “Configuration profiles
  • Choose the Device Configuration profile you want to work with, and at the top of the page, you’ll see a quick view of the Success, Failure, Conflict, Not Applicable, and In Progress status.
  • Click on “View report” to access more detailed information.

End-user Experience

After the deployment is completed successfully, Users may need to restart their devices to get this setting affected. Once the policy is in place, users will not be required to press CTRL + ALT + DEL before signing in on Windows 10 and dismiss it using mouse or keyboard on Windows 11 devices.

If you want to confirm the policy, you can test it by pressing the Windows key + L to lock your computer; it should display the Sign-in page instead of the lock screen.

FAQs

1. Disable Windows 10/11 Lock Screen using Group Policy

In the previous sections of the blog post, we covered how to disable the Windows 10/11 Lock screen using the Intune admin center. If your devices are Entra Hybrid joined, or Active Directory joined, you can use the Group Policy Management Console to create a GPO and disable the lock screen on the Windows devices. Let’s check the steps:

  • Log in to a Domain Controller as a Doman admin.
  • Press the Windows key + R to open the Run dialog box.
  • Type gpmc.msc and press Enter to open the Group Policy Management Console.
  • Create a GPO object and Navigate to Computer Configuration > Administrative Templates > Control Panel > Personalization​.

On the right-hand side, you will find a setting called “Do not display the lock screen“. Double-click on it and select Enabled. Click on OK to Save and close.

After configuring the setting, Link this GPO to an Organization Unit containing Windows 10/11 devices.

If you want to configure this setting locally from a Windows 10/11 device, you can type gpedit.msc in the Run dialog box and press Enter. This will open the Local Group Policy Editor. Navigate to the same setting and enable it.

Useful Tip
Disable Windows 10/11 Lock Screen using Group Policy

2. Disable Windows 10/11 Lock Screen using Registry

You can also disable the Windows 10/11 Lock screen using the Windows registry. However, this is not a convenient method when dealing with hundreds of computers where you want to change this setting.

Let’s check the steps:

  • Login on a Windows 10 or Windows 11 device as an administrator.
  • Press the Windows key + R together to open the Run dialog box.
  • Type regedit and press Enter to open the Registry Editor.
  • Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows. Right-click on it and create a new Key.
Disable Windows 10/11 Lock Screen using Registry
  • Provide the registry key name as Personalization and right-click on it to create a new DWORD (32-bit) registry entry.
Disable Windows 10/11 Lock Screen using Registry
  • Provide the name of the registry entry as NoLockScreen and set its value to 1. Close out of the Registry editor after completing the changes.
  • Restart your Windows device, and you will notice that the Lock screen is no longer showing. You can directly log in to the device without pressing Ctrl + Alt + Del or dismissing the Lock screen by other means.
Disable Windows 10/11 Lock Screen using Registry

Leave a Comment