CodeTwo Active Directory Photos: A Complete Implementation Guide
In a modern corporate environment, visual identification improves internal communication and boosts team collaboration. Populating Active Directory (AD) with user photos ensures that profile images appear automatically across internal systems like Outlook, SharePoint, Microsoft Teams, and Windows.
CodeTwo Active Directory Photos is a free, lightweight tool that simplifies the process of managing these images in bulk. This guide covers how to install, configure, and use the software effectively. Technical Prerequisites
Before deploying the tool, ensure your environment meets the minimum requirements:
Operating System: Windows Server 2016, 2019, 2022, or Windows ⁄11 (with RSAT installed).
Permissions: Domain Administrator rights or delegated write permissions for the thumbnailPhoto attribute. Framework: .NET Framework 4.5 or higher. Network: Direct connectivity to a Domain Controller. Step 1: Installation and Initial Setup
The installation process is straightforward and does not require a reboot of your domain controllers.
Download the latest version of CodeTwo Active Directory Photos from the official CodeTwo website.
Run the installer (.msi) on your management machine or a domain controller.
Follow the setup wizard prompts and accept the license agreement. Launch the application from your Start Menu. Step 2: Import and Match Photos
The software allows you to upload photos for individual users or import them for the entire organization simultaneously. Individual Imports Launch the program to view the list of AD users. Highlight a specific user from the list. Click Change and browse to the desired image file. Click Save to commit the changes to Active Directory. Bulk Imports Prepare your image files in a single folder.
Rename the image files to match a unique AD identifier (e.g., john.smith.jpg for samAccountName, or 10024.png for employeeID). Click the Import button on the main toolbar. Select the folder containing your prepared images.
Choose the matching mechanism (e.g., matching the filename to the samAccountName attribute). Preview the matches to ensure accuracy, then click Finish. Step 3: Manage Image Sizes and Formats
Active Directory stores photos directly inside the database, making file optimization critical to prevent database bloat.
Attribute Limitation: The standard thumbnailPhoto attribute has a hard limit of 100 KB, though Microsoft recommends keeping files under 10 KB.
Dimensions: Aim for a standard size of 96×96 pixels or 648×648 pixels for high-resolution setups.
Automatic Compression: CodeTwo Active Directory Photos automatically resizes and compresses imported images to fit the native AD constraints without requiring external editing software. Step 4: Verification and Synchronization
Once uploaded, the photos must replicate across your infrastructure.
Domain Replication: Wait for your scheduled Active Directory replication interval, or force it manually using the repadmin /syncall command.
Global Catalog: Ensure the thumbnailPhoto attribute is replicated to the Global Catalog so applications can access it quickly.
Microsoft 365 Sync (Hybrid Environments): If you run a hybrid deployment, Entra ID Connect (formerly Azure AD Connect) will synchronize these photos to the cloud during its next delta sync cycle (usually every 30 minutes). Troubleshooting Common Issues
Photos Not Appearing in Outlook: Address books are often cached locally. Force an Offline Address Book (OAB) download in Outlook via Send/Receive > Download Address Book.
Grayed Out Import Options: Ensure the account running the CodeTwo software has explicit write permissions to the thumbnailPhoto schema attribute for the target Organizational Units (OUs).
Blurry Images: If photos look pixelated in modern apps like Microsoft Teams, consider uploading a higher resolution master image directly to Microsoft 365, as the on-premises thumbnailPhoto attribute is optimized for smaller thumbnails.
To help tailor this guide or assist with your deployment, let me know:
Is your environment fully on-premises or a hybrid Azure AD/Entra ID setup?
Approximately how many users do you need to import photos for?