Hello,

We are populating AD with users photos and it also shows up in Outlook which is a nice feature, but users can chnage their picture, can we use a GPO to block this so only we can control this?

Thanks

Hi

You may try the below command in powershell:

Set-OwaVirtualDirectory -id "owa (Default Web Site)" -SetPhotoEnabled $False

Please have a try and then let us know the result.

Best Regards,

Elaine

Where is this set on the Exchange server?

I thought it would be some sort of Office GPO?

I dont think there is a setting for this you can turn the photo off in its entirety however 

We have a tool that updates their pictures, but want to just block users doing this themselves so we do need to have this feature.

not sure its possible i may be wrong, why dont you run the PS script and see if it works