Forum Discussion

Harry Dubois's avatar
Harry Dubois
Brass Contributor
Sep 28, 2016
Solved

Prevent users to change profil photo

I want to prevent users that they can change the company's profile picture, but I cannot find the solution on the web. I have tried several solutions, but still is the user capable to change the profile photo... What is the best solution for it?

 

For example: this is not working for me:

http://www.msexchange.org/kbase/ExchangeServerTips/ExchangeServer2013/OutlookOWA/prevent-users-changing-photo-owa.html.

 

  • Set-OWAMailboxPolicy applies only for OWA and users can able to change their photos from other O365 services. Also this policy will take effect after 60 minutes,

47 Replies

  • Dean_Gross's avatar
    Dean_Gross
    Silver Contributor
    I am curios, what it the reason for this requirement? A lot of effort has been made by software creators like MS to provide users the ability to personalize the systems that they use many hours a day. Why does a company think that allowing their staff to change a photo is a bad idea?
    • Mark_Webb's avatar
      Mark_Webb
      Copper Contributor

      Dean_Gross  Standards.  We have users that have been uploading goofy pictures, replacing their professional pictures.

    • Gilbert Reinhardt's avatar
      Gilbert Reinhardt
      Copper Contributor

      Users perception vs Company perception of a professional photo to promote the company image is a good example.

       

    • Fromelard's avatar
      Fromelard
      Iron Contributor

      Dear Dean,

      This question is also opened in our case, and finally we let the Picture profile management to the Users himself but encouraging to respect some HR policy (not place picture of someone else like baby, not place to much holidays pictures, not place logo pictures, etc. ...).

       

      Another case, i can see is to let only one place managing the user profile picture which could be the internal HRIS Application. This is the high level point in our company when the deployment application will be done globally (more than 120 countries and more than 80'000 concerned).

       

      So anyway, i think it could be anyway better to educate the user to explain them what is acceptable and what is not, than block them.

       

      Fab

  • SanthoshB1's avatar
    SanthoshB1
    Bronze Contributor
    Set-OWAMailboxPolicy applies only for OWA and users can able to change their photos from other O365 services. Also this policy will take effect after 60 minutes,
    • Anonymous's avatar
      Anonymous

      If the OWA policy is set to prevent users from modifying their profile picture in O365/Exchange, can a global admin still change it on behalf of the user?  It seems when using the Managing Another User option, the option to change the profile picture is not available.  Using the Set-UserPhoto cmdlet didn't seem to work either. 

      • James Gantt's avatar
        James Gantt
        Copper Contributor

        It can still be changed in the users admin center and also changed by the user in their user options via Outlook. 

    • Harry Dubois's avatar
      Harry Dubois
      Brass Contributor
      Did not know there was a delay from 60 minutes. Testuser is not enable to change the picture, also not in his 'Delve' profile. Great!
    • Harry Dubois's avatar
      Harry Dubois
      Brass Contributor

      Thanx Santhosh. So there is no 'tenant-setting' to prevent users from editing their profile photo? Running the same PSscript every month? :-)

      • Muditha's avatar
        Muditha
        MCT

        Hi Harry,

         

        You do not need to keep doing this every month. :)

         

        When you run Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false without defining an Outlook Web App Policy by using -Identity parameter, it disables the feature for all Outlook Web App Policies in your tenant. Including the default Outlook Web Access Policy.

         

        If you want to disable the feature for a specific set of users, then you can create a new Outlook Web App Policy, assign it to those who you wish to disable this feature, and then run the command as below.

         

        Get-OwaMailboxPolicy -Identity "OWAPolicy_Name" | Set-OwaMailboxPolicy -SetPhotoEnabled $false

         

        Thank you.

        Muditha Chathuranga

Resources