Win7 - Use GPO to set different User Account Picture at logon-screen

At our company we are going to migrate to Windows 7 next year. One of the things we would like to do, is to display a specific picture for each user that log on to the system.

Users can set their own user account picture but we would like to set it to the photo of the user. This needs to be done through GPO when the user logs on.

I found out that the picture information is stored in "c:\programdata\microsoft\user account pictures\" and is called domain + username.DAT (eg. MYDOMAIN + MARK.DAT).

I am able to create a script that during logon of a users copies a specific file to this location but how do I create this DAT file? If I open it in a picuture viewer it is not a picture file.
Has anybody else had this challenge and how did you deal with it?

Any help would be appreciated.
u795696Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

The_KirschiCommented:
0
u795696Author Commented:
Ermm, no I did not see that article because it discusses the change of the LogonUI Background. Something completly different..... I need to change the User Account Picture for each separate user
0
The_KirschiCommented:
Yes, you're right. Sorry for this.

The .dat file is not the picture itself but a file that has multiple info about the users' profile. The user picture actually is a bmp file.

Maybe this will help you:

I'm running server 2008 (with all the extra GP items for Vista, requiring the client side extensions installed on each maching).  I use the User Settings->Preferences->Windows Settings->Files, I'm using a central location as my source, and destination is C:\Users\%Username\AppData\Local\Temp\(Domain)+%Username%.bmp where (Domain) is your network Domain.

Found at: http://www.eggheadcafe.com/software/aspnet/32256951/force-user-account-picture-wgroup-policy.aspx
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
10 Tips to Protect Your Business from Ransomware

Did you know that ransomware is the most widespread, destructive malware in the world today? It accounts for 39% of all security breaches, with ransomware gangsters projected to make $11.5B in profits from online extortion by 2019.

Lee OsborneCommented:
Just for information, I do exactly the same as @The_Kirschi, although with a slight variation on the file locations.

My user.bmp file is copied from the central share to c:\programdata\microsoft\user account pictures\user.bmp . When a user logs on, it will copy this file to their profile account picture.

I also copy guest.bmp to the same location which will automatically set the account picture for new users who log on.

Lee
0
u795696Author Commented:
I have now created 2 scripts that will do the change for me.

Script 1: runs at computer startup and changes rights to the USER.BMP file at C:\PROGRAMDATA\MICROSOFT\USER ACCOUNT PICTURES\ with ICACLS

Script 2: Runs at logon of a user; this script looks at the user loggin on and then copies the appropriate user-picture to the folder mentioned in script 1. Then it stops the explorer-process and restarts it so that the picture is also displayed at the top of the startmenu.

All works fine, we do not use Fast User Switching so everybody had his own picture displayed and if there is no picture then a default logo will be displayed.

I now need to be able to prevent that users are able to use the Windows menu to change their picture so that it will always be the picture I set to the user.
Is a GPO available for this? We have a DC running on MS Server 2003.

0
Lee OsborneCommented:
You can lock this down by using the following GPO:

Computer Configuration > Administrative Templates > Control Panel > User Accounts
Apply the default user logon picture to all users: Enabled

This will force the default picture to be used, and will also prevent it from being changed.

Lee
0
u795696Author Commented:
OK then I guess my queste for this is finished :)

I'll split credits between you and The_Kirschi
0
u795696Author Commented:
With the provided links I was able to get things the way I wanted them after some tweaking
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 7

From novice to tech pro — start learning today.