几种不同方式将用户照片导入到AD

修改 AD架构为了使头像能够显示在GAL中，需要让其在全局编录（GC）中进行复制 ，

默认情况下，对象 的“thumbnailphoto”属性 值不会在GC中进行复制 ，通过修改 AD架构可以是实现 这一个功能。

1. 在以管理 员身份打开cmd，并执行 Regsvr32 schmmgmt.dll注册AD架构管理单元，如下图所示：

2. 打开MMC控制 台，添加AD架构管理 单元

3. 在活动 目录 架构管理 单元中展开“属性 ”节点，定位到“thumbnailPhoto”。

4. 打开“thumbnailPhoto”的属性 对话框，在“常规”选项 卡上勾选“将此属性 复制 到全局编录”。

 

修改完毕后保存。以下几种方式进行修改。

提示：

我们要实现准备好一些照片，照片不要超过大小不要超过30KB，所以尺寸也要控制好，一般就96X96就差不多了，太大了没有意义，因为这些照片是存在AD内的，所以如果太大的话，会导致AD的数据库增大，从而影响复制

 

1、powershell脚本修改

脚本1：

$SAMName=Read-Host "Enter a username"

      $root = [ADSI]'GC://dc=uc,dc=local'

      $searcher = new-object System.DirectoryServices.DirectorySearcher($root)

$searcher.filter = "(&(objectClass=user)(sAMAccountName=$SAMName))"

$user = $searcher.findall()

$userdn = $user[0].path

$userdn = $userdn.trim("GC")

$userdn = "LDAP" + $userdn

function Select-FileDialog

{

    param([string]$Title,[string]$Directory,[string]$Filter="All Files (*.*)|*.*")

    [System.Reflection.Assembly]::LoadWithPartialName("System.Windows.Forms") | Out-Null

    $objForm = New-Object System.Windows.Forms.OpenFileDialog

    $objForm.InitialDirectory = $Directory

    $objForm.Filter = $Filter

    $objForm.Title = $Title

    $objForm.ShowHelp = $true

    $Show = $objForm.ShowDialog()

    If ($Show -eq "OK")

    {

        Return $objForm.FileName

    }

    Else

    {

        Write-Error "Operation cancelled by user."

    }

}

$photo = Select-FileDialog -Title "Select a photo" -Directory "%userprofile%" -Filter "JPG Images (*.jpg)|*.jpg"

$user = [ADSI]($userdn)

[byte[]]$file = Get-Content $photo -Encoding Byte

# clear previous image if exist 

$user.Properties["thumbnailPhoto"].Clear()

# write the image to the user's thumbnailPhoto attribute by converting the byte[] to Base64String 

$user.Properties["thumbnailPhoto"].Add([System.Convert]::ToBase64String($file))

# commit the changes to AD 

$user.CommitChanges()

 

脚本2：

#Add-ADPhoto   Powershell v1 compatibile script for updating

#user thumbnailphoto attribute.  Resizes input photo to recommended

#dimensions and size.  Only updates for the currently logged in user.

#This is a script for user self service.

#Author: Nathan Linley

#Site: http://myitpath.blogspot.com

$infile = $args[0]

$aspect = $args[1]

function usage {

        write-host "Usage: Add-ADPhoto filename [aspect]"

        write-host "   Provide the name of an image file in your current directory."

        write-host "   If you wish to preserve the aspect ratio of the image, type"

        write-host "   1 after your file name.  Images are resized to the recommended"

        write-host "   96x96, converted to JPG and set to 70% quality to limit size."

        exit 

}

$imagefile = (pwd).path + "\" + $infile

$imagefileout = (pwd).path + "\adout.jpg"

##############################################################################

#Check to see if the argument for filename was provided, and that it exists###

##############################################################################

if ([string]::isnullorempty($infile) -or -not (test-path $imagefile)) {

        &usage

}

###############################

#Remove any old converted file#

###############################

if (test-path $imagefileout) {

        del -path $imagefileout -ErrorAction "silentlycontinue"

}

$Image = New-Object -ComObject Wia.ImageFile

$ImageProcessor = New-Object -ComObject Wia.ImageProcess

##########################################################

#Try loading the file, if its not an image this will fail#

##########################################################

$Image.LoadFile($ImageFile)

if (-not $?) { &usage }

#############################################################

#Create filters, set aspect ratio setting, change dimensions#

#to max 96pixels, convert to JPG and set quality            #

#############################################################

$Scale = $ImageProcessor.FilterInfos.Item("Scale").FilterId

$ImageProcessor.Filters.Add($Scale)

$Qual = $ImageProcessor.FilterInfos.Item("Convert").FilterID

$ImageProcessor.Filters.Add($qual)

if ([string]::isnullorempty($aspect) -or [string]$aspect -ne "1") {

        $ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $false

} else {

        $ImageProcessor.Filters.Item(1).Properties.Item("PreserveAspectRatio") = $true

}

$ImageProcessor.Filters.Item(1).Properties.Item("MaximumHeight") = 96

$ImageProcessor.Filters.Item(1).Properties.Item("MaximumWidth") = 96

$ImageProcessor.Filters.Item(2).Properties.Item("FormatID") = "{B96B3CAE-0728-11D3-9D7B-0000F81EF32E}"

####################################################################

#Drop image quality until it meets the size recommendation of 10kb #

####################################################################

$quality = 80

do {

        Remove-Item -path $imagefileout -ErrorAction "silentlycontinue"

        $ImageProcessor.Filters.Item(2).Properties.Item("Quality") = $quality

        $Image = $ImageProcessor.Apply($Image)

        $Image.SaveFile($ImageFileOut)

        [byte[]]$imagedata = get-content $imagefileout -encoding byte

        $quality -= 10

} while ($imagedata.length -gt 10kb)

#####################################################################

#Find domain, and Account distinguished name.  Open user object, add#

#thumbnailphoto data and save.

#####################################################################

$de = new-object directoryservices.directoryentry("LDAP://" + $env:logonserver.substring(2))

$ds = new-object directoryservices.directorysearcher($de)

$ds.filter = "(&(objectclass=user)(samaccountname=" + $env:username + "))"

$myaccount = $ds.findone()

$de = new-object directoryservices.directoryentry($myaccount.path)

$de.properties["Thumbnailphoto"].clear()

$de.properties["Thumbnailphoto"].add($imagedata) |out-null

$de.setinfo()

Write-Host "Photo has been uploaded"

 

2、vbscript脚本修改

我AD里面的用户名字是张三，那么照片也是张三。

AD里面用户的名称为张三，而AD属性里面对应名称字段的值为name，要以这个为准。因为我们一会脚本搜索的属性也是这个name属性。

照片就非常简单了，用户的名字为文件名。

 

Const ForReading = 1

'图片存的目录 

InDir = "C:\photo" 

Set fso = CreateObject("Scripting.FileSystemObject") 

set oIADS = GetObject("LDAP://RootDSE") 

strDefaultNC = oIADS.Get("defaultnamingcontext") 

Set theConn = CreateObject("ADODB.Connection") 

theConn.Provider = "ADsDSOObject" 

theConn.Open "ADs Provider" 

Set theCmd  = CreateObject("ADODB.Command") 

theCmd.ActiveConnection = theConn 

Set objRecordSet = CreateObject("ADODB.Recordset") 

For Each tFile In fso.GetFolder(InDir).Files 

    tName = tFile.Name 

    tName = Left(tName, InStrRev(tName,".")-1) 

      strQuery = "<LDAP://" & strDefaultNC & ">;" & "(&(objectClass=person)(name=" & tName & "));name,adspath;subtree" 

    theCmd.CommandText = strQuery 

    Set objRS = theCmd.Execute 

    If objRS.RecordCount = 0 Then 

      MsgBox "Can't find account for " & tName 

    Else 

      Set objUser = GetObject(objRS("adspath")) 

      ObjUser.Put "thumbnailPhoto", ReadByteArray(tFile.Path) 

      ObjUser.SetInfo 

    End If 

Next 

Function ReadByteArray(strFileName) 

    Const adTypeBinary = 1 

    Dim bin 

    Set bin = CreateObject("ADODB.Stream") 

    bin.Type = adTypeBinary 

    bin.Open 

    bin.LoadFromFile strFileName 

    ReadByteArray = bin.Read 

End Function

3、C#代码修改

DirectoryEntry container = new DirectoryEntry(LDAP_URI + USERS_DIR);

DirectoryEntry user = container.Children.Add("cn=" + username, "user");

// Set other property's of the user object:

//// user.Properties ["xxx"].Value = "yyy";

//// ...

byte [] buffer;

FileStream fileStream = new FileStream(@"c:\photo.jpg", FileMode.Open, FileAccess.Read);

try {

    int length = (int) fileStream.Length;  // get file length

    buffer = new byte [length];            // create buffer

    int count;                             // actual number of bytes read

    int sum = 0;                           // total number of bytes read

    // read until Read method returns 0 (end of the stream has been reached)

    while ((count = fileStream.Read(buffer, sum, length - sum)) > 0)

        sum += count;  // sum is a buffer offset for next reading

}

finally {

    fileStream.Close();

}

user.Properties ["thumbnailPhoto"].Value = buffer;

user.CommitChanges();