End users access to Axure AD portal

[Ketzpatel]

We have a company policy to not allow photos upload by end users unless the photo is taken by the professional team in the company but users are able to upload their pics. We have this option blocked by OWA policy. Upon further troubleshooting we found out that there appears to be a bug and users can upload pics from AAD portal . We have the below setting already configured correctly 

Restrict access to azure ad admin portal

but users are still able to access the portal.

did anyone have similar experience?

[#2]

Hi there! Im a bit confused, where are they uploading the pictures? Do you mean changing their profile pictures?

[#3]

@oliwer_sundgren 

correct. We have this option blocked by OWA policy but users can still access to profile in AAD and from properties tab, they are able to change or update profile pic which than reflects to all o365 services for the user. 

[#4]

I understand!
Perhaps this article could be of assistance for you? There are several places a user can change their photo, for example Sharepoint and via direct link to the Changephoto URL

https://www.codetwo.com/admins-blog/prevent-users-from-changing-profile-photos-microsoft-365/

[#5]

Thank you.

We have the photo upload blocks in O365 via OWA policy, In SPO, We also disabled work & email account settings on Win 10 using GPO, disabled remote PS for all users but they are still able to access it. Opening a case with Microsoft and MS PG advised that we use Conditional access to block Azure management app so no users can access the portal but that blocks other access to so did not work. the URL that users are able to upload/change pic is below. https://portal.azure.com/#view/Microsoft_AAD_UsersAndTenants/Usermanagementmenublade/~/AllUsers

We have the below disabled in Azure for non-admin users

Restrict access to Azure AD administration portal - set to YES but users can still access the above URL and can change photos from the profile - properties tab.