Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

One of the more interesting features of Windows Vista/7 is being able to set a photo to represent your user. This is nice on a standalone installation, but is there a way to set the photo in Active Directory so that the photo is consistent no matter where the user logs in across the domain?

share|improve this question
Why? I'm sure the use knows what he or she looks like. :) – John Gardeniers Sep 29 '09 at 2:22
up vote 3 down vote accepted

Unfortunately, it does not look like there is a built-in way for Windows Vista/7 clients to utilize the jpegPhoto or thumbnailPhoto attributes in Active Directory.

However, another option may be to write a logon script that extracts the binary data from AD and store it in %programdata%\Microsoft\User Account Picutres\user.bmp. Then turn on the Group Policy setting Apply the default user logon picture to all users which is under Control Panel\User Accounts.

For the logon script, search for those two attribute names and you will see some sample programs for uploading/downloading the images.

share|improve this answer

In a large organization, this would be a great way to cut down on Social Engineering attempts - particularly if you could verify someones picture via the GAL.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.