Forum Discussion
Prevent users to change profil photo
- Set-OWAMailboxPolicy applies only for OWA and users can able to change their photos from other O365 services. Also this policy will take effect after 60 minutes,
If the OWA policy is set to prevent users from modifying their profile picture in O365/Exchange, can a global admin still change it on behalf of the user? It seems when using the Managing Another User option, the option to change the profile picture is not available. Using the Set-UserPhoto cmdlet didn't seem to work either.
It can still be changed in the users admin center and also changed by the user in their user options via Outlook.
- Did not know there was a delay from 60 minutes. Testuser is not enable to change the picture, also not in his 'Delve' profile. Great!
Thanx Santhosh. So there is no 'tenant-setting' to prevent users from editing their profile photo? Running the same PSscript every month? :-)
Hi Harry,
You do not need to keep doing this every month. :)
When you run Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false without defining an Outlook Web App Policy by using -Identity parameter, it disables the feature for all Outlook Web App Policies in your tenant. Including the default Outlook Web Access Policy.
If you want to disable the feature for a specific set of users, then you can create a new Outlook Web App Policy, assign it to those who you wish to disable this feature, and then run the command as below.
Get-OwaMailboxPolicy -Identity "OWAPolicy_Name" | Set-OwaMailboxPolicy -SetPhotoEnabled $false
Thank you.
Muditha Chathuranga
- Thanx Muditha for this additional information!
- It could be great to have an Azure AD policy to manage this ^-^
