Office 365 Prevent User to Change Profile Picture

Cloud Microsoft Office 365
1

My company staff is frequently changing the their Profile picture at the beginning my management was fine with it. But now they have asked me to take over the access and maintain similar pictures.

So, what will be the best practice to prevent it??

3 Likes
2

Set-OWAMailboxPolicy applies only for OWA and users can able to change their photos from other O365 services. Also this policy will take effect after 60 minutes,

1 Like
3

Hi @sharif5209,

I suggested NOT to overwrite any existing policy If you want to disable the feature for a specific set of users, then you can create a new Outlook Web App Policy and assign it to those who you wish to disable this feature, and then run the command as @umer has suggested.

When you run Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false without defining an Outlook Web App Policy by using -Identity parameter, it disables the feature for all Outlook Web App Policies in your tenant. Including the default Outlook Web Access Policy.

Get-OwaMailboxPolicy -Identity “OWAPolicy_Name” | Set-OwaMailboxPolicy -SetPhotoEnabled $false

Thanks

5 Likes
4

I just to share that user pictures in Office 365 are controlled entirely via online Exchange. Changing the OWA policy should prevent users from changing their picture via any method, even if they don’t have a mailbox.

2 Likes
5

I followed this step long ago, but today I have found one of my users seems to have changed his profile image. While confirming I found out he has changed his profile image through Microsoft Team.

Does this setting not apply for Microsoft Team?? I thing Microsoft Team is overight this permission for Office 365 setting

6

This is 2023 and still Microsoft Teams don’t have the option to prevent user from changing their profile picture. Microsoft Teams has it owns admin center in M365 portal but not sure why Microsoft hasn’t given this option for admin to prevent profile picture changing.

I can see frequently our employees changing their profile picture that is against our company policy most of them are the new employees. Hoping Microsoft consider adding this feature to soon.

7

It seems like the issue is that the current settings to prevent users from changing their profile pictures in Office 365 do not apply to Microsoft Teams. Here’s a more comprehensive answer to address this problem:

Preventing Users from Changing Profile Pictures in Office 365 and Microsoft Teams

To ensure users cannot change their profile pictures across Office 365 and Microsoft Teams, you must apply settings in both environments. Here’s how you can do it:

1. Office 365 (Outlook Web App Policy)

  1. Create a New Outlook Web App (OWA) Policy:

    • Log in to the Exchange Admin Center (EAC).
    • Navigate to Permissions > Outlook Web App Policies.
    • Click the + button to create a new policy, name it, and save it.

  2. Connect to Exchange Online Using PowerShell:

    • Open PowerShell and connect to Exchange Online using the following commands:
      "`PowerShell
     $UserCredential = Get-Credential
     Connect-ExchangeOnline -UserPrincipalName $UserCredential.UserName -Password $UserCredential.Password
  1. Set the Policy to Disable Photo Changes:
    • Run the following command to remove the ability to change profile photos:
Set-OwaMailboxPolicy -Identity "YourNewOWAPolicyName" -SetPhotoEnabled $false
  1. Assign the New Policy to Users:
    • In the EAC, go to Recipients > Mailboxes.
    • Double-click the user to whom you want to apply the policy.
    • Under Mailbox Features, scroll down to Email Connectivity and click View Details.
    • Select the new OWA policy and save the changes.

2. Microsoft Teams

Microsoft Teams does not have a built-in feature to prevent users from changing their profile pictures directly through its admin center. However, you can manage this through Azure Active Directory (Azure AD) settings:

  1. Restrict Profile Picture Changes in Azure AD:

    • Go to the Azure AD Admin Center.
    • Navigate to User Settings.
    • Under User Feature Settings, find the option to restrict users from changing their profile pictures and disable it.

  2. PowerShell Command for Azure AD:

    • You can also use PowerShell to enforce this setting:
Set-AzureADUser -ObjectId <UserObjectId> -UserPrincipalName <UserPrincipalName> -Photo <Photo>