Is there a way for Adaxes to use Microsoft 365 user profile pictures instead of having to select a file per user?

Question

Is there a way for Adaxes to use a user's Microsoft 365 profile pictures instead of having to select a file on a per user basis?

Comments

Hello Keneth,

Sorry for the confusion, but we are not sure what exactly you mean. Please, describe the desired behavior in all the possible details with live examples.

---

Thank you for the quick response! Many of our users in our Microsoft 365 tenant have added personalized profile pictures to their accounts that appear on their Office.com profile, as well as in Outlook. I would like to know if there is a way for Adaxes to use those pictures for user profiles.

---

You can sync the M365 photo to on-prem AD with a scheduled task. Here are the basics:

# you'll need to figure out how you want to get and store the credential to connect to the MS Graph API
Connect-MgGraph -TenantId <yourTenantId> -Credential $<graphCredential>

$photoPath = New-TemporaryFile
Get-MgUser -Filter "userprincipalname eq 'user@domain.com'"|%{Get-MgUserPhotoContent -userid $_.id -OutFile $($photoPath.FullName}

# from https://www.adaxes.com/script-repository/import-user-photo-s244.htm
[Byte[]]$pictureBytes = Get-Content $photoPath -Encoding Byte
$Context.TargetObject.Put("thumbnailPhoto", $pictureBytes)
$Context.TargetObject.SetInfo()

---

Thanks ngb. I'm not fluent with powershell yet, so before I try to implement this I want to make sure I know what I'm looking at. This portion here: -userid $_.id

I'd have to replace $_ with the stored credential at $<graphCredential>?

Example: $myCredential ... $myCredential.id

---

Hello Keneth,

The script saves the target user photo from Microsoft 365 to on-premises AD. It does not influence Adaxes configuration. First of all, the script requires additional credentials to establish connection. Also, the approach will always force Get-MgUserPhotoContent to issue a warning that the file exists and will be overwritten. If the approach with saving the photo from Microsoft 365 to AD is what you need, you can use the following script from our repository: https://www.adaxes.com/script-repository/set-user-photo-from-microsoft-365-in-ad-s581.htm.

---

Also, the approach will always force Get-MgUserPhotoContent to issue a warning that the file exists and will be overwritten

Not as written it won't.

Answer 1

Hello Keneth,

If you mean the pictures displayed in the Web interface for on-premises users, there is no such possibility. Pictures can only be displayed according to the specified property of the user.

Comments

If I may suggest adding this idea as a feature, if it's even possibe.

---

Hello Keneth,

Thank you for the suggestion. We forwarded it to the corresponding department for consideration.