修改 AD架构为了使头像能够显示在GAL中，需要让其在全局编录（GC）中进行复制 ，

默认情况下，对象 的“thumbnailphoto”属性 值不会在GC中进行复制 ，通过修改 AD架构可以是实现 这一个功能。

1. 在以管理 员身份打开cmd，并执行 Regsvr32 schmmgmt.dll注册AD架构管理单元，如下图所示：

2. 打开MMC控制 台，添加AD架构管理 单元

3. 在活动 目录 架构管理 单元中展开“属性 ”节点，定位到“thumbnailPhoto”。

4. 打开“thumbnailPhoto”的属性 对话框，在“常规”选项 卡上勾选“将此属性 复制 到全局编录”。

 

修改完毕后保存。以下几种方式进行修改。

提示：

我们要实现准备好一些照片，照片不要超过大小不要超过30KB，所以尺寸也要控制好，一般就96X96就差不多了，太大了没有意义，因为这些照片是存在AD内的，所以如果太大的话，会导致AD的数据库增大，从而影响复制

 

1、powershell脚本修改

脚本1：

$SAMName=Read-Host "Enter a username"

$root = [ADSI]'GC://dc=uc,dc=local'

$searcher = new-object System.DirectoryServices.DirectorySearcher($root)

$searcher.filter = "(&(objectClass=user)(sAMAccountName=$SAMName))"

$user = $searcher.findall()

$userdn = $user[0].path

$userdn = $userdn.trim("GC")

$userdn = "LDAP" + $userdn

function Select-FileDialog

{

param([string]$Title,[string]$Directory,[string]$Filter="All Files (*.*)|*.*")

[System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") | Out-Null

$objForm = New-Object System.Windows.Forms.OpenFileDialog

$objForm.InitialDirectory = $Directory

$objForm.Filter = $Filter

$objForm.Title = $Title

$objForm.ShowHelp = $true

$Show = $objForm.ShowDialog()

If ($Show -eq "OK")

{

Return $objForm.FileName

}

Else

{

Write-Error "Operation cancelled by user."

}

}

$photo = Select-FileDialog -Title "Select a photo" -Directory "%userprofile%" -Filter "JPG Images (*.jpg)|*.jpg"

$user = [ADSI]($userdn)

[byte[]]$file = Get-Content $photo -Encoding Byte

# clear previous image if exist

$user.Properties["thumbnailPhoto"].Clear()

# write the image to the user's thumbnailPhoto attribute by converting the byte[] to Base64String

$user.Properties["thumbnailPhoto"].Add([System.Convert]::ToBase64String($file))

# commit the changes to AD

$user.CommitChanges()

 

脚本2：

#Add-ADPhoto   Powershell v1 compatibile script for updating

#user thumbnailphoto attribute.  Resizes input photo to recommended

#dimensions and size.  Only updates for the currently logged in user.

#This is a script for user self service.

#Author: Nathan Linley

#Site: http://myitpath.blogspot.com

$infile = $args[0]

$aspect = $args[1]

function usage {

write-host "Usage: Add-ADPhoto filename [aspect]"

write-host "   Provide the name of an image file in your current directory."

write-host "   If you wish to preserve the aspect ratio of the image, type"

write-host "   1 after your file name.  Images are resized to the recommended"

write-host "   96x96, converted to JPG and set to 70% quality to limit size."

exit

}

$imagefile = (pwd).path + "\" + $infile

$imagefileout = (pwd).path + "\adout.jpg"

##############################################################################

#Check to see if the argument for filename was provided, and that it exists###

##############################################################################

if ([string]::isnullorempty($infile) -or -not (test-path $imagefile)) {

&usage

}

###############################

#Remove any old converted file#

###############################

if (test-path $imagefileout) {

del -path $imagefileout -ErrorAction "silentlycontinue"

}

$Image = New-Object -ComObject Wia.ImageFile

$ImageProcessor = New-Object -ComObject Wia.ImageProcess

##########################################################

#Try loading the file, if its not an image this will fail#

##########################################################

$Image.LoadFile($ImageFile)

if (-not $?) { &usage }

#############################################################

#Create filters, set aspect ratio setting, change dimensions#

#to max 96pixels, convert to JPG and set quality            #

#############################################################

$Scale = $ImageProcessor.FilterInfos.Item("Scale").FilterId

$ImageProcessor.Filters.Add($Scale)

$Qual = $ImageProcessor.FilterInfos.Item("Convert").FilterID

$ImageProcessor.Filters.Add($qual)

if ([string]::isnullorempty($aspect) -or [string]$aspect -ne "1") {

$ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $false

} else {

$ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $true

}

$ImageProcessor.Filters.Item(1).Properties.Item("MaximumHeight") = 96

$ImageProcessor.Filters.Item(1).Properties.Item("MaximumWidth") = 96

$ImageProcessor.Filters.Item(2).Properties.Item("FormatID") = "{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}"

####################################################################

#Drop image quality until it meets the size recommendation of 10kb #

####################################################################

$quality = 80

do {

Remove-Item -path $imagefileout -ErrorAction "silentlycontinue"

$ImageProcessor.Filters.Item(2).Properties.Item("Quality") = $quality

$Image = $ImageProcessor.Apply($Image)

$Image.SaveFile($ImageFileOut)

[byte[]]$imagedata = get-content $imagefileout -encoding byte

$quality -= 10

} while ($imagedata.length -gt 10kb)

#####################################################################

#Find domain, and Account distinguished name.  Open user object, add#

#thumbnailphoto data and save.

#####################################################################

$de = new-object directoryservices.directoryentry("LDAP://" + $env:logonserver.substring(2))

$ds = new-object directoryservices.directorysearcher($de)

$ds.filter = "(&(objectclass=user)(samaccountname=" + $env:username + "))"

$myaccount = $ds.findone()

$de = new-object directoryservices.directoryentry($myaccount.path)

$de.properties["Thumbnailphoto"].clear()

$de.properties["Thumbnailphoto"].add($imagedata) |out-null

$de.setinfo()

Write-Host "Photo has been uploaded"

 

2、vbscript脚本修改

我AD里面的用户名字是张三，那么照片也是张三。

AD里面用户的名称为张三，而AD属性里面对应名称字段的值为name，要以这个为准。因为我们一会脚本搜索的属性也是这个name属性。

照片就非常简单了，用户的名字为文件名。

 

Const ForReading = 1

'图片存的目录

InDir = "C:\photo"

Set fso = CreateObject("Scripting.FileSystemObject")

set oIADS = GetObject("LDAP://RootDSE")

strDefaultNC = oIADS.Get("defaultnamingcontext")

Set theConn = CreateObject("ADODB.Connection")

theConn.Provider = "ADsDSOObject"

theConn.Open "ADs Provider"

Set theCmd  = CreateObject("ADODB.Command")

theCmd.ActiveConnection = theConn

Set objRecordSet = CreateObject("ADODB.Recordset")

For Each tFile In fso.GetFolder(InDir).Files

tName = tFile.Name

tName = Left(tName, InStrRev(tName,".")-1)

strQuery = "
     
      ;" & "(&(objectClass=person)(name=" & tName & "));name,adspath;subtree"
     

theCmd.CommandText = strQuery

Set objRS = theCmd.Execute

If objRS.RecordCount = 0 Then

MsgBox "Can't find account for " & tName

Else

Set objUser = GetObject(objRS("adspath"))

ObjUser.Put "thumbnailPhoto", ReadByteArray(tFile.Path)

ObjUser.SetInfo

End If

Next

Function ReadByteArray(strFileName)

Const adTypeBinary = 1

Dim bin

Set bin = CreateObject("ADODB.Stream")

bin.Type = adTypeBinary

bin.Open

bin.LoadFromFile strFileName

ReadByteArray = bin.Read

End Function

3、C#代码修改

DirectoryEntry container = new DirectoryEntry(LDAP_URI + USERS_DIR);

DirectoryEntry user = container.Children.Add("cn=" + username, "user");

// Set other property's of the user object:

user.Properties ["xxx"].Value = "yyy";

...

byte [] buffer;

FileStream fileStream = new FileStream(@"c:\photo.jpg", FileMode.Open, FileAccess.Read);

try {

int length = (int) fileStream.Length;  // get file length

buffer = new byte [length];            // create buffer

int count;                             // actual number of bytes read

int sum = 0;                           // total number of bytes read

// read until Read method returns 0 (end of the stream has been reached)

while ((count = fileStream.Read(buffer, sum, length - sum)) > 0)

sum += count;  // sum is a buffer offset for next reading

}

finally {

fileStream.Close();

}

user.Properties ["thumbnailPhoto"].Value = buffer;

user.CommitChanges();