I want to assign users a picture (o let them assign their own picture) to their user domain account and wherever they log in, that picture should appear as well.
How can I do this using group policy?
All my clients are at least Windows 7 and the server is a Windows Server 2012 R2 with the forest level set to Windows Server 2012 R2.
You could theoretically do this easily with the Files section of Group Policy Preferences. In Windows 7, information about user account pictures is stored in
%ProgramData%\Microsoft\User Account Pictures. Each user has a .DAT binary file that contains the path and information about a picture that has been set.
You could set a user's picture, making sure to store it on a network location so it would be accessible from any system. Then, simply make a copy of the .DAT file, throw it on a network share, and make a GPP Files entry to push it to every computer.
Users wouldn't be able to set their own picture without assistance, but after they did it the first time, it would follow them around.