none
AD Photos - looking to enforce (remove "display no photo" option)

    Question

  • Hi There,

    After reading through all the threads i can find, i noticed that there is no documented way to force AD photos to be used for all lync clients.

    I must say that I find it strange to have no built in control for this either through the CSCP , GPO, in band policies etc... nothing.

    I decided to do a bit of digging.

    I used an example user which has set their photo to disabled (i've already created a policy to disallow custom photos)

    i installed the reskit tools for Lync, and then ran the following command on the lync server:

    DBAnalyze.exe /report:user /users:user@domain.com > C:\temp\logfile.txt

    Once I began combing through the output of the command, i noticed plenty of locations where the term "Photo" is recorded.....

    Most if not all of which appear under the section "Static Publications"

    There are a bunch of sequentially numbered entries below, and if you look closely enough, some of them will contain photo configuration information.

    I have taken a excerpt to show what i found:

    26
    Category Name    : contactCard
    Container Number : 200
    Instance Number  : 6
    Version          : 4
    LastPubTime      : 3/8/2011 8:08:30 PM
    ExpiresAt        : NULL
    Data             : <contactCard xmlns="http://schemas.microsoft.com/2006/09/sip/contactcard">
        <title>Office Worker</title>
        <office>Office Site 1</office>
        <delimiter xmlns:auto-ns1="http://schemas.microsoft.com/2006/09/sip/contactcard" xmlns="http://schemas.microsoft.com/2006/09/sip/commontypes"></delimiter>
        <delimiter xmlns:auto-ns1="http://schemas.microsoft.com/2006/09/sip/contactcard" xmlns="http://schemas.microsoft.com/2006/09/sip/commontypes"></delimiter>
        <displayADPhoto>false</displayADPhoto>
        <photo type="enterprise"><uri></uri><hash>0966f096987cd89070987a0970987898908908</hash></photo>
       </contactCard>

    I have put in bold / italic the parts which caught my eye.

    As far as i can understand, this confirms that the photo settings for each user are stored in the CMS.

    If there is a way to enforce this within the CMS, or modify it properly, there may be a way afterall to manage users photos so that they are forced to use AD only, and cannot disable client side.

    Seeking other people to help push this a little further..

     

    mercredi 9 mars 2011 13:09

Toutes les réponses

  • You can set where photos are to be obtained from using a client policy.

    Set-CsClientPolicy -Identity PhotoPolicy -DisplayPhoto PhotosFromADOnly


    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com
    jeudi 10 mars 2011 09:39
  • Chris,

    This doens't result in the solution we want. Setting this allows the user to now only select their AD photo OR no photo.

    We're after removing the no photo option as well, effectively AD photo is forced as the only option.

    jeudi 10 mars 2011 15:00
  • I don't think you would be able to achieve that as even if you managed to insert the photo for everyone there is no option then to remove them choosing not to display it. Why would users choose not to display as it will be available to everyone anyway. You could just have a company policy they are not to turn off photos it is easy to check and warn those not adhering to the policy.
    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com
    jeudi 10 mars 2011 18:41
  • You can set where photos are to be obtained from using a client policy.

    Set-CsClientPolicy -Identity PhotoPolicy -DisplayPhoto PhotosFromADOnly


    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com

    have another go at reading the topic
    jeudi 10 mars 2011 21:22
  • I don't think you would be able to achieve that as even if you managed to insert the photo for everyone there is no option then to remove them choosing not to display it. Why would users choose not to display as it will be available to everyone anyway. You could just have a company policy they are not to turn off photos it is easy to check and warn those not adhering to the policy.
    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com


    if the honour system worked, microsoft would be out of business.

     

    jeudi 10 mars 2011 21:23
  • Sorry I have now read the topic and have also seen that you have also asked the same question before in another thread and my answer is the same as you received before as it is the closest you will achieve currently.
    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com
    jeudi 10 mars 2011 22:07
  • This is nothing to do with an honour system this is a written policy which you should implement and inforce. Most companies that tell their employees how they should behave and use their systems do not have those rules ignored. If your company lacks a way to discipline its employees that is a different problem and maybe that should be addressed first.
    Chris Clark - | MCTS:OCS & UC Voice Specialization | MCSE | MCSA | CCNA http://www.unitycomms.com
    jeudi 10 mars 2011 22:16
  • Cheers, Obviously not a "feature" we can use to acheive this goal. Lets hope MS put it in to SP1 of Lync. Lets put an end to this thread before it becomes an arguement. :)

    Cheers both of you.

    I've decided that if people turn it off I'll just replace their AD picture with something less appropriate so atlease Outlook 2010 will still show it.

    vendredi 11 mars 2011 07:57
  • I have to chime in here and say how weak this is - brag up a feature about photos, sync it with the release of an Outlook version that uses a corporate photo, but don't allow admins to enforce it.

    I'm sure that would have been a tough feature to create.

    mercredi 30 mars 2011 15:10
  • Damn, I'm looking for the exactly same thing. I would like disable selecting no photo option. Did you succeded?
    bostjanc
    jeudi 31 mars 2011 10:50
  • We second this request.  We need a policy feature to force AD pictures from being turned off in the client.

    Jason

    lundi 23 mai 2011 20:17
  • This can't be done and it looks like "forgoten feature".

    I would like to accomplish the same but will have to wait for MS to include this option in some future update.

    mercredi 8 juin 2011 12:01
  • Has anyone been able to modify the cms as indicated in the original post? Or script something to manually change the setting for all users? We can then just schedule the script to keep changing the setting back to use default corporate photo
    mercredi 15 juin 2011 17:34
  • still no solution :)
    bostjanc
    vendredi 17 juin 2011 08:49
  • Afraid not, it is a lacking feature. Maybe MS will sort this in SP1? ;)

    mercredi 3 août 2011 11:30
  • hello 

    the cmdl no running.

    vendredi 16 mars 2018 11:56
  • hello

    this is problem solved?

    vendredi 16 mars 2018 12:00