We should be able to sync user photos from AD Attribute thumbnailPhoto and manage them for all users.