Active Directory Update - Allow users to update their own Active Directory information

Enabling Photo for Directory Update and Directory Manager

Applies to:
    Directory Update v1.6
    Directory Manager v1.2

Directory Update v1.6 (and later) as well as and Directory Manager v1.2 (and later) support the ability to upload a photo in to the Active Directory. Here are some important things to keep in mind about photo support:

  • Photos are disabled by default
  • Each photo will take up 30KB to 75KB of space in the Active Directory database; for the best results, photos that the user’s upload should have a similar aspect ratio so they don’t look stretched.
  • Photos are “re-rended” to an aspect ratio of 130 pixels wide by 170 pixels high
  • Photos are stored in the jpegPhoto attribute of the user object; this attribute only exists in the Active Directory schema if it has been prepped to support Windows 2003 or Windows 2008. You can change this to thumbnailphoto though we recommend you keep it
  • Photos are not replicated to the Global Catalog; only to domain controllers in the same domain as the user.
  • You must have applications that can read the photo data, such as the Directory Search application. No version of Outlook can currently read the jpegPhoto XE "jpegPhoto"  attribute and display it in the Global Address List. Tell Microsoft you want this!
  • The NETWORK SERVICE user must have “Read”, “Read & Execute”, “Write”, and “Modify” permissions to the c:\inetpub\wwwroot\directoryupdate\photos folder; this is the temporary photo storage location.

 Below is the photo tag from the DirectorySettings.XML file; here you can change the label, photo width/height (in pixels), and a GIF image to display to a user that does not currently have a photo.


<photo label="Add/Change Photo" attribute="jpegPhoto" visible="no" editable="no" width="130" height="170" defaultValue="Images/noPhoto.gif" />

 

 

 

Last reviewed:  29 August, 2008


Google
WWW Directory Update site