Using a script to determine who doesn't have profile photos.

Question

Using a script to determine who doesn't have profile photos.

Joe Grover 566

We are currently in a hybrid Exchange/365 environment. We need to find out who doesn't have photos attached to their accounts. Unfortunately the scripts I'm using are indicating people don't have photos that do in fact have them, so I'm not getting anywhere.

First I tried this script against my local AD:

get-aduser -searchbase 'OU=Users,DC=mydomain,DC=local' -Filter {(Enabled -eq $true)} | Where {$_.thumbnailPhoto -eq $NULL}

This output every user in the OU. Picking a user I knew had a photo (like myself) I exported all of the attributes of the user and there was no thumbnailPhoto attribute. There was however a jpegPhoto attribute, but changing the query to look for jpegPhoto -eq $NULL returned no results at all.

So then I found a script to run against Exchange Online. I connected to it via Powershell and ran the following:

get-mailbox -resultsize Unlimited -RecipientTypeDetails Usermailbox | Where {$_.HasPicture -eq $false} | Select-Object DisplayName,UserPrincipalName,HasPicture

Again, this output everybody, including myself (who definitely has a picture).

What am I missing here?

Emily Hua-MSFT 27,796 Reputation points

2022-02-28T01:16:30.343+00:00

Hi, @Joe Grover
As your issue is more related to Exchange, I would modify the the, thanks for your understanding.
KyleXu-MSFT 26,396 Reputation points

2022-02-28T08:30:08.003+00:00

@Joe Grover

get-mailbox -resultsize Unlimited -RecipientTypeDetails Usermailbox | Where {$_.HasPicture -eq $false} | Select-Object DisplayName,UserPrincipalName,HasPicture

This command works well in my lab. Could you describe how your mailbox was created? And how do you set photo for your mailbox?
Joe Grover 566 Reputation points

2022-02-28T13:51:07.807+00:00
This also was showing users who had photos already.

Most of the photos were added prior to us migrating to 365 and were done using the following command:

$photo = [byte[]](Get-Content C:\photos\jdoe.jpg -Encoding byte) Set-ADUser jdoe -Replace @{thumbnailPhoto=$photo}

We would use a CSV to import using those commands. I found this article explaining the process we used.

http://woshub.com/how-to-import-user-photo-to-active-directory-using-powershell/

This is why I was initially trying to use the thumbnailPhoto attribute to see who had something for that value, but my command wasn't good enough to determine if that value contained data or not.
Thoma, Janine 0 Reputation points

2023-04-07T08:10:07.2833333+00:00

Hi all, Actually the get-aduser command also works if you change it like this and add -Properties *

get-aduser -searchbase 'OU=Users,DC=mydomain,DC=local' -Properties * -Filter {(Enabled -eq $true)} | Where {$_.thumbnailPhoto -eq $NULL}
If you check the command get-aduser and flow all then you notice there will be no thumbnailPhoto value but after you extend it with -Properties and set a wildcard it will search the values of all properties and works just right.

Accepted answer

0 additional answers

Your answer

Emily Hua-MSFT 27,796 Reputation points

2022-02-28T01:16:30.343+00:00

Hi, @Joe Grover
As your issue is more related to Exchange, I would modify the the, thanks for your understanding.
KyleXu-MSFT 26,396 Reputation points

2022-02-28T08:30:08.003+00:00

@Joe Grover

get-mailbox -resultsize Unlimited -RecipientTypeDetails Usermailbox | Where {$_.HasPicture -eq $false} | Select-Object DisplayName,UserPrincipalName,HasPicture

This command works well in my lab. Could you describe how your mailbox was created? And how do you set photo for your mailbox?
Joe Grover 566 Reputation points

2022-02-28T13:51:07.807+00:00

This also was showing users who had photos already.

Most of the photos were added prior to us migrating to 365 and were done using the following command:

$photo = [byte[]](Get-Content C:\photos\jdoe.jpg -Encoding byte) Set-ADUser jdoe -Replace @{thumbnailPhoto=$photo}

We would use a CSV to import using those commands. I found this article explaining the process we used.

http://woshub.com/how-to-import-user-photo-to-active-directory-using-powershell/

This is why I was initially trying to use the thumbnailPhoto attribute to see who had something for that value, but my command wasn't good enough to determine if that value contained data or not.
Thoma, Janine 0 Reputation points

2023-04-07T08:10:07.2833333+00:00

Hi all, Actually the get-aduser command also works if you change it like this and add -Properties *

get-aduser -searchbase 'OU=Users,DC=mydomain,DC=local' -Properties * -Filter {(Enabled -eq $true)} | Where {$_.thumbnailPhoto -eq $NULL}
If you check the command get-aduser and flow all then you notice there will be no thumbnailPhoto value but after you extend it with -Properties and set a wildcard it will search the values of all properties and works just right.

Answer 1

Gary Reynolds 9,621

Hi Joe,

The LDAP query to return all users with neither the thumbnailphoto or jpegphoto set is:

(&(Objectclass=user)(!thumbnailphoto=*)(!jpegphoto=*))

You can use this with the -ldapfilter parameter with the get-user powershell command to get all the user without a picture in AD.

Gary.

Gary Nebbett 6,216 Reputation points

2022-02-25T19:36:42.763+00:00

Hello Gary,

Can you quickly edit your response - the two asterisk in your query example have just italicised the word jpegphoto!

What you wrote was:

(&(Objectclass=user)(!thumbnailphoto=*)(!jpegphoto=*))

However, the mark-up language interpreted the two unescaped (with backslash) asterisk as a "italic" (emphasis) mark-up.

Gary
Joe Grover 566 Reputation points

2022-02-28T13:39:59.447+00:00
That did the trick. Thanks!

For posterity, this is exactly what I ran to get the information (restricting my search to just that OU instead of filtering by enabled users--our Disabled users are in a sub-OU from that one, so this was a better option for me):

$filter = '(&(Objectclass=user)(!thumbnailphoto=*)(!jpegphoto=*))' get-aduser -searchbase 'OU=Users,DC=domain,DC=local' -SearchScope OneLevel -ldapfilter $filter | sort-object surname | select-object Surname,GivenName,SamAccountName

Share via

Using a script to determine who doesn't have profile photos.

0 additional answers

Your answer