Synchronize the thumbnail photo from the on premises active directory

Skip to main content. Select Product Version. All Products. When you change an Office user's photo by accessing that user's on-premises information, the change isn't synced to Exchange Online. For example, when the user views his or her photo in Outlook, Outlook on the web formerly known as Outlook Web Appor Skype for Business Online, the user's previous Exchange Online profile photo is still displayed.

Although the thumbnailPhoto attribute is synced from the on-premises environment to Azure Active Directory Azure ADthe following things could cause this problem. Note The thumbnailPhoto attribute can store a user photo as large as kilobytes KB. Any later changes to the attribute from the on-premises environment are not synced to the Exchange Online mailbox. Use the Set-UserPhoto cmdlet or Outlook on the web to change the user's photo. These methods enable you to upload a photo that's as large as KB.

To do this, follow these steps: Important To use the Set-UserPhoto cmdlet to its full size capabilities, you have to change the connection URI by appending? Run the Set-UserPhoto command to change the user photo. For more information, see Set-UserPhoto. Admins can use the Set-UserPhoto cmdlet to change their own photo without having to change the ConnectionUri parameter. However, to change another user's photo, admins must first change the ConnectionUri parameter.

If the parameter isn't changed, admins receive the following error message when they use the cmdlet to change a user's photo: Request return error with following error message: The remote server returned an error: Request Entity Too Large For more information, see the following Microsoft Knowledge Base article: User contact photos in Lync aren't displayed correctly.

Last Updated: Nov 14, Was this information helpful? Yes No. Tell us what we can do to improve the article Submit. Your feedback will help us improve the support experience. Australia - English. Bosna i Hercegovina - Hrvatski. Canada - English. Crna Gora - Srpski. Danmark - Dansk. Deutschland - Deutsch. Eesti - Eesti.This looks ok in the Lync and Outlook client, but results in a blurred photo when Lync, for example, attempts to upscale the image for use in a conference.

In Lync and Skype for Business Server photos can be stored in the user's mailbox when using Exchangeallowing for photo sizes up to x pixels. In addition to that, Exchange automatically resizes these photos for use in different products as needed:. If we upload a photo to Exchange, Exchange will automatically create a 64x64 pixel version of that photo and update the user's thumbnailPhoto attribute.

However, if we manually update the thumbnailPhoto attribute in AD the photo in the user's mailbox will not automatically be updated. This photo is only used by Lync or legacy clients, so we are ok. To use high resolution photos, we have to use the Set-UserPhoto Exchange cmdlet:. We can now save this photo into a JPEG file and or import it directly to a different user for example usefull if the user gets a new account :.

Get-UserPhoto nuno. If you want to use high resolution photos in Lync as well, you might want to ensure you update your Lync Client policy with a MaxPhotoSizeKB of at least instead of just Besides writing his personal Exchange blog, LetsExchange.

Hello Nuno, Thanks for your article! And what happens when we change photo from Skype for Business client? You are welcome! So, no matter where you change it from, it always get updated there, because that is the only location where it exists apart from a small thumbnail in AD, but that's no longer used by Exchange or Skype.

As such, you simply cannot have different photos. Are there alternatives to set-userphoto and get-userphoto, like some sort of API? We built a web-based phonebook app for our Intranet site that retrieves the low-res photos in AD. It would be nice to use the high-res photos from Exchange. It would be nice if they could upload a high-res photo to Exchange, which would automatically replace the low-res photo in AD with the new one.

You can't update the app to connect to Exchange and use the Set-UserPhoto cmdlet? I am sure you can also use Exchange Web Services to set users photos, but I have never tried it Output cmdlet Set-Content at command pipeline position 1 Supply values for the following parameters: Value[0]:. The entire line should be: " Get-UserPhoto nuno. Your email address will not be published.

Learn about the latest security threats, system optimization tricks, and the hottest new technologies in the industry. Over 1, fellow IT Pros are already on-board, don't be left out! TechGenix reaches millions of IT Professionals every month, and has set the standard for providing free technical content through its growing family of websites, empowering them with the answers and tools that are needed to set up, configure, maintain and enhance their networks.

Nuno Mota Posted On September 24, Post Views: 11, Featured Links. Andrey Novokreshchennykh June 11, at am.A lot of customers have had questions about user photos. Why are my user photos not syncing to O? The changes replicate in on premise AD, but why can my cloud users not see the changes? Well, there is an answer for that…. There has been a significant change in how user photos are presented with newer Microsoft services which includes O In LyncExchange Online and Sharepoint Online user photos are stored on the root of the user mailbox.

This change was implemented for several reasons, including allowing the ability to allow high resolution photos. In short, the photos are essentially stored in two places. When you sync a user into Officeyou sync uploads to Azure AD. For the user photo attribute Office stores that photo at the root of the EXO mailbox.

So for picture sync to work at a user is required to have a EXO license and mailbox. From there the picture will be synched into SPO. Now SharePoint needs to create 3 thumbnails S,M,L to be used in various areas of the product based on photo size requirements. These photos are created and stored on the My Site Host site collection. In order for these files to be created, users must navigate to the About Me page. So even if the picture sync process between Exchange Online and SharePoint Online has completed successfully, the photo will not display in SharePoint until the thumbnail photos have been created.

It is also good to note in some cases it may take up to 72 hours before the user photo may show up in Sharepoint Online.

synchronize the thumbnail photo from the on premises active directory

Going forward, for Hybrid Deployments, I advise to set the users photos in the cloud. You can expect the photos to sync to O only 1 time from on-premise AD via the thumbnail attribute, after that there is no guarantee the photos will sync. It is best to use the Set-Userphoto cmdlet up update the O object. Updating the thumbnail photo on premise and syncing the changes to O will update on premise, however EXO does not look on premise at that attribute for changes again.HR has recently insisted that we set our ID photos system wide across our applications to have some standardization across the board and to stop user's from uploading their own photos.

Turns out that Azure AD Connect can't sync anything above 10kb?

synchronize the thumbnail photo from the on premises active directory

Which leads to some very poor looking photos Works great. Now the only problem seems to be, that Azure AD Connect keeps trying to sync the photos we have even though we've reverted all the changes we made to Azure AD Connect and turned off attribute sync entirely. I receive a email almost every hour with the contents of the error:. If you want to update, reduce the length in the local directory services, and then try again.

synchronize the thumbnail photo from the on premises active directory

I haven't I didn't realize I could access the properties of that individual sync through the Azure AD Services page. Looked in the properties and it looks like the Azure AD Configure options weren't being reflected here. One unclick, and no more errors! I had this problem once before. I would think you just update the attributes you're syncing, then stop and restart the service. Do a full sync in both directions, most likely. Azure AD Connect is only running on one physical server.

Steps to migrate users from on-premises Active Directory to Azure AD

Service has been started and stopped multiple times to no avail :. OK, well have you tried the 'Refresh Schema' command? And then restart the service? Which version of the connector are you running they seem to update it frequently Get answers from your peers along with millions of IT pros who visit Spiceworks.

Any thoughts on getting Azure AD Connect to stop attempting the update on these objects? Best Answer. Verify your account to enable IT peers to see that you are a professional. We found 4 helpful replies in similar discussions:. Fast Answers! Wages Dec 11, Was this helpful?

See all 4 answers. Which of the following retains the information it's storing when the system power is turned off? Rich This person is a verified professional. Do you have more than one AD Connect service running? Replace Attachment.

High Resolution User Photo Synchronization to Office 365

Add link Text to display: Where should this link go? Add Cancel. Insert code. Join me to this group. Read these nextI wanted to share a script I came up with to help keep our active directory profile photos in sync with Office and SharePoint Online, but first a little background on WHY I did this and how the script works along with a few caveats.

I attached the script to this post, the code in the post is only for reference. For some unknown reason, user profile photos were missing from Delve and SharePoint Online.

They may have removed them on their own, but they still existed in our on-prem AD and we wanted to make sure they were in sync. We are all aware that the photo sync process is messy and rarely works well.

One issue is that the photo sync only works on the initial sync of the photo, if we update an AD photo the changed photo never reflected in SharePoint unsure if this changed yet. An admin could use the Set-UserPhoto cmd to update the photo but it would take anywhere from hours to update in SharePoint, if it even did it at all. I create this script to synchronize the pictures from our Active Directory on prem to SPO and EXO this covers most of the services we use atm that pull the profile picture.

You can specify a scale or a new resolution for the new image. UserPrincipalName -ForegroundColor green. FullName, [System. Sign In. Azure Dynamics Microsoft Power Platform. Turn on suggestions. Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type. Showing results for. Did you mean:. New Contributor. Good Afternoon All, I wanted to share a script I came up with to help keep our active directory profile photos in sync with Office and SharePoint Online, but first a little background on WHY I did this and how the script works along with a few caveats.

The script targets the 3 main OU's we are concerned with and creates an array of users that have the thumbnailPhoto attribute set in AD. Caveats: The SharePoint user profile should have a link defined in the "picture" attribute, I believe this is created by default regardless of whether the user had a picture synced previously or not. The script is NOT efficient but it works, I am SURE there are ways to make it a little smaller and more friendly to pop in some variables, I may update it later, but I wanted something that worked.

There are definitely redundancies in repeating parts the script for each OU. I am going to post a sample for a single searchbase so it is easier to look at. This will be replaced with a variable in a future update so it is easier to manage.

Unfortunately the Set-UserPhoto cmd and really slow, nothing we can do about it. The SPO photo upload can be slow at times as well. This is not something I would do daily depending on the number of user accounts you have to sync. Portions of the script were borrowed from the following. Related Conversations. Pinning Edge on taskbar for each different profile makes some not display the profile name.

Need help with a powershell script that modifies excel spreadsheets. Documents opening in online office instead of the installed Office app. What's New. Microsoft Store.There are some known limitation and inconsistency with user photos synchronization from Active Directory using the thumbnailPhoto attribute to Azure AD and Office apps: Exchange, SharePoint and Skype for Business aka Lyncspecifically if you want to upload high resolution photos of your users that will span across all of Office services.

So to summarize at this point, we want to import high resolution photos to our users. If we rely on the thumbnailPhoto attribute value from Active Directory, we will end up with low resolution images needs more JPEG effect or inconsistent results if we look on the SharePoint case.

To upload high resolution photos to Officeyou should use Set-UserPhoto. Although promising, my testing and others. Unhandled Exception: System. The system cannot find the file specified. InitializeWebService at Contoso. Main String[] args. Thanks for the writeup. Should be easy to test, but as far as I can think — yes it should be overwritten, unless you will filter out these attributes.

Skip to content. Leave a Reply Cancel reply. Next Next post: EMS license assignment to all users made easy. Sorry, your blog cannot share posts by email.Many intranets have a personalized news or events widgets based on the employee user profile office or department properties. Have you ever surprised to see some of your active directory user profile properties especially profile photos are not synced to the SharePoint online user profile store?

If you wonder, read on. Behind the scenes, exchange online and outlook is becoming center of gravity for the Office profile pictures. Strange part here is Office syncs exchange online photo for the given user whenever a user visits the Microsoft Delve first time.

If you ever manually update SharePoint user profile properties for a given user, it will reflect on the Microsoft Delve page. If a user manually visits the Microsoft Delve home page, Office background process triggers exchange online photos sync to the SharePoint user profiles. If your custom SharePoint components require profile photos, you have no choice but upload them manually directly to the SharePoint user profile store. There are more than dozens of articles on the internet to sync user profile photos and cell phone to the SharePoint online user profiles.

As of fallmy suggestion to use following two solutions. Both of these solutions worked for us recently. As usual, please plan to test this on the test tenant, prior to running it on the production tenant.

Import Images into the Active Directory

Here are some additional references to your research. Some of them have really nice background information, which will help you understand the larger picture of this issue. You are commenting using your WordPress.

You are commenting using your Google account. You are commenting using your Twitter account. You are commenting using your Facebook account. Notify me of new comments via email. Microsoft Cloud with Nik Patel. Skip to content. Home About Me. Posted on December 19, by Nik Patel. At a high level: The on-premises active directory is synced to the Azure active directory either using Azure AD sync or customized PowerShell approach.

This SPO directory is nothing but active directory hosted on the Microsoft cloud servers to host all the SPO online profiles source data.

To standardize the process and consistent approach, Microsoft is using AD import method to import global SPO Directory data into the Sharepoint user profile store. Like this: Like Loading This entry was posted in Uncategorized. Bookmark the permalink. Leave a Reply Cancel reply Enter your comment here Please log in using one of these methods to post your comment:. Email required Address never made public.

Name required. Search for:.


Leave a Reply

Your email address will not be published. Required fields are marked *