Link to home
Start Free TrialLog in
Avatar of u795696
u795696Flag for Netherlands

asked on

Win7 - Use GPO to set different User Account Picture at logon-screen

At our company we are going to migrate to Windows 7 next year. One of the things we would like to do, is to display a specific picture for each user that log on to the system.

Users can set their own user account picture but we would like to set it to the photo of the user. This needs to be done through GPO when the user logs on.

I found out that the picture information is stored in "c:\programdata\microsoft\user account pictures\" and is called domain + username.DAT (eg. MYDOMAIN + MARK.DAT).

I am able to create a script that during logon of a users copies a specific file to this location but how do I create this DAT file? If I open it in a picuture viewer it is not a picture file.
Has anybody else had this challenge and how did you deal with it?

Any help would be appreciated.
Avatar of Member_2_3654191
Member_2_3654191
Flag of Germany image

Avatar of u795696

ASKER

Ermm, no I did not see that article because it discusses the change of the LogonUI Background. Something completly different..... I need to change the User Account Picture for each separate user
ASKER CERTIFIED SOLUTION
Avatar of Member_2_3654191
Member_2_3654191
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Just for information, I do exactly the same as @The_Kirschi, although with a slight variation on the file locations.

My user.bmp file is copied from the central share to c:\programdata\microsoft\user account pictures\user.bmp . When a user logs on, it will copy this file to their profile account picture.

I also copy guest.bmp to the same location which will automatically set the account picture for new users who log on.

Lee
Avatar of u795696

ASKER

I have now created 2 scripts that will do the change for me.

Script 1: runs at computer startup and changes rights to the USER.BMP file at C:\PROGRAMDATA\MICROSOFT\USER ACCOUNT PICTURES\ with ICACLS

Script 2: Runs at logon of a user; this script looks at the user loggin on and then copies the appropriate user-picture to the folder mentioned in script 1. Then it stops the explorer-process and restarts it so that the picture is also displayed at the top of the startmenu.

All works fine, we do not use Fast User Switching so everybody had his own picture displayed and if there is no picture then a default logo will be displayed.

I now need to be able to prevent that users are able to use the Windows menu to change their picture so that it will always be the picture I set to the user.
Is a GPO available for this? We have a DC running on MS Server 2003.

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of u795696

ASKER

OK then I guess my queste for this is finished :)

I'll split credits between you and The_Kirschi
Avatar of u795696

ASKER

With the provided links I was able to get things the way I wanted them after some tweaking