Handy tool to change the background and not enforce it, so the users are
still able to change it is Desktoppr
https://github.com/scriptingosx/desktoppr
After adjusting our firewall to allow all incoming traffic from the
Apple IP range 17.0.0.0/8 issues were resolved. The previous role
*.apple.com was not sufficient anymore.