Forum Discussion

Copper Contributor

Feb 21, 2025

Solved

Deactivating Option to change Profile Picture at myaccount.microsoft.com

As the title says. I would like to deactivate the option for users to change their profile picture at myaccount.microsoft.com. The profile picture at our company is synchronized to AD and via Entra C...

Identity

microsoft 365

VasilMichev
Feb 23, 2025
The solution Microsoft provides for this scenario is the new "profile photo update settings". It allows you to configure which role(s) can be used for this operations, including allowing users to change their own photo. For the time being, the setting is only available via Graph though. I wrote a short article about it a while ago: https://www.michev.info/blog/post/6196/how-to-control-profile-photo-updates-in-microsoft-365-via-the-photoupdatesettings-control

Ahmed_Masoud97

Iron Contributor

Feb 23, 2025

To disable the option for users to change their profile picture at my account.microsoft.com , use Azure AD PowerShell:

Connect to Azure AD:
powershell -> Connect-AzureA
Disable profile picture changes:
powershell ->Set-MsolCompanySettings -UsersPermissionToChangeProfilePictureDisabled $true

This ensures profile pictures remain synced from on-premises AD via Azure AD Connect. Communicate the change to users, as they will no longer be able to update their pictures manually.