Since the script has to be universal and work in Windows 7 as well, we won’t use the RSAT-AD-PowerShell module, but we will access AD through the ADSISearcher C# class.Īn example of the SetADPicture.ps1 script to get a user’s photo from AD and set it as a Windows account avatar picture is given below:
You can use the Get-ADUser cmdlet from the ActiveDirectory module (this module must be installed on all computers via RSAT, or you can just copy the necessary RSAT-AD-PowerShell module files without installing RSAT). There are two ways to get user photo from AD. Then we need to run a PowerShell script that should get a photo of the current user from Active Directory, save it in a jpg file and set it as a Windows user profile picture. PowerShell Script to Get the AD User’s Photo and Set the User Profile Picture in Windows 10 In the next window, select the option Replace existing permission on all sub keys with inheritable permissions, otherwise users won’t have any privileges for the nested registry subkeys.Then, in the Security tab, check the Full Control permissions for all domain users ( \Users) and click OK.Then in the GPO editor go to the following section Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Registry and add a new registry key ( Add key) with the path MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AccountPicture\Users.To do this, run the Group Policy Management console (gpmc.msc), create a new policy and link it to the OU with users’ computers.It is easier to deploy the registry key permissions in AD domain using GPO:
To allow users without administrator privileges to change the profile picture, you must grant them write permissions to this registry key. However, non-admin users don’t have the necessary permissions to add values to this registry key. In Windows 10 you can set the user account profile picture through the registry key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AccountPicture\Users. Providing Permissions to Users to Change Profile Picture in Windows We have considered in detail how to manage AD user photos using PowerShell in the article How to Import User Photo to Active Directory.
0 kommentar(er)
