How can I retrieve the current image of a user account?

Question

I am trying to extract the current image of a user account in Windows 7, but I cannot figure out where it is located. I found that the image is sometimes written to the user's temporary folder, but only after performing certain actions. This is not always guaranteed. Did anyone manage to extract this image? Thanks!

Update: I'm trying to extract an image using C ++, but help in any language would be a big step. :)

Answer 1

This is described in the "User Profile Palis" section in Windows 7. This does not seem very encouraging.

Answer 2

Whenever an API call needs a UserTile, it is copied to% TEMP% \% USERNAME% .bmp, which is usually C: \ Users \ username \ AppData \ Local \ Temp \ username.bmp.

But if you need to extract it directly from SAM, you can configure the details from http://deployment.xtremeconsulting.com/2010/06/23/usertile-automation-part-1/ so that the program reads HKLM \ SAM \ SAM \ Domains \ Account \ Users \ ???????? \ UserTile (in the system context!), Skip 12 bytes, read 4 bytes in uint and read that uint is the number of bytes in the file.

Edit: it seems to me, I should add that the API call that Explorer uses in Windows XP to get the icon is an unnamed address in one of the login dlls (so you cannot name it yourself, since this address must change between versions ), I can’t remember which DLL at the moment.

Answer 3

I'm not sure how you want to extract the picture. But if you just can use Windows Explorer, go to C: \ Users \ (your username) \ AppData \ Local \ Temp. The image file is named as (your username) .bmp

I got this from http://www.sevenforums.com/tutorials/5187-user-account-picture-change.html . I checked it and it worked.