Disabling Photos in Office 365 Outlook and OWA

Hello,

We recently moved to Office 365. Our users can access their mailbox from their Desktop by launching Outlook or via Outlook Web App.  I am currently assigned as one of the Exchange Admin, so this system is new to all of us. Our current dilemma is regarding the Photo Profile.  Our management decided to not have all users upload their own photos and instead, to have us administrators control over this feature.  Right now, some of our users have already uploaded their photos.  I would really appreciate it if someone can give me some ideas about controlling this photo feature which will control both (Outlook on their Desktop & OWA).  Currently, we are on Exchange Online and we control the AD (Dirsync).  Here are things that I want to  accomplish:

1. Remove the existing pictures that have been uploaded.

2. Disable the Photo Upload so that users can't upload their own photo.

3. a cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.

We have about 4K users and about to migrate all of them soon.  Currently, we only have our Pilot Users, approx. 100 users.

Thank You in advance! 

June 13th, 2015 6:51pm

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

Free Windows Admin Tool Kit Click here and download it now
June 15th, 2015 9:06am

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

June 15th, 2015 9:06am

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

Free Windows Admin Tool Kit Click here and download it now
June 15th, 2015 9:06am

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

June 15th, 2015 9:06am

Hello Vasil,

Thank you for the information.  Since our migration will happen very soon for all our users, I believe the first thing that I should do is to Disable users from uploading photos by doing your suggestion of (1) editing the default OWA mailbox policy and (2) set SetPhotoEnabled to $false. Please correct me if I am wrong, you said, I have to do two things and those are, use the cmdlet to disable the users from uploading photos? Is this the correct cmdlet for disabling it? (2)

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -DisplayPhotosEnabled $false -SetPhotoEnabled $false

The next one that you suggested to disable users from uploading photos, you said to also (1) edit the default OWA mailbox policy? Do you mean go to;

EAC/Permissions/User Roles/Default Role Assignment Policy and Uncheck MyContactInformation?

And finally, you said To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet (3). I'm thinking of doing this last.  Do you think it is best to do this option last after all the migration is done, or after I applied (1) and (2)?

I'm sorry to ask you this as I'm a newbie in this area, how do I take advantage of the thumbnailPhoto attribute in AD? Is there a cmdlet that I can use and apply it here on AD?How does this work?

You also mentioned about the Set-UserPhoto cmdlet? I don't exactly know how to do this? Do you have a reference site or sample where I can copy or get more information?

Thanks.

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 4:06am

Hello Vasil,

Thank you for the information.  Since our migration will happen very soon for all our users, I believe the first thing that I should do is to Disable users from uploading photos by doing your suggestion of (1) editing the default OWA mailbox policy and (2) set SetPhotoEnabled to $false. Please correct me if I am wrong, you said, I have to do two things and those are, use the cmdlet to disable the users from uploading photos? Is this the correct cmdlet for disabling it? (2)

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -DisplayPhotosEnabled $false -SetPhotoEnabled $false

The next one that you suggested to disable users from uploading photos, you said to also (1) edit the default OWA mailbox policy? Do you mean go to;

EAC/Permissions/User Roles/Default Role Assignment Policy and Uncheck MyContactInformation?

And finally, you said To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet (3). I'm thinking of doing this last.  Do you think it is best to do this option last after all the migration is done, or after I applied (1) and (2)?

I'm sorry to ask you this as I'm a newbie in this area, how do I take advantage of the thumbnailPhoto attribute in AD? Is there a cmdlet that I can use and apply it here on AD?How does this work?

You also mentioned about the Set-UserPhoto cmdlet? I don't exactly know how to do this? Do you have a reference site or sample where I can copy or get more information?

Thanks.

June 17th, 2015 4:06am

If you want to centrally manage photos, best thing to do is to populate the thumbnailPhoto attribute in AD. Dirsync will take care of the rest. The only problem there might be with the rather small size that it allows, so if you are not fine with that limitation you can use the Set-UserPhoto cmdlet instead.

To remove all photos uploaded manually by the users, use Remove-UserPhoto. To disable users from uploading photos, edit the default OWA mailbox policy and set SetPhotoEnabled to $false. To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet.

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 4:24am

If you want to centrally manage photos, best thing to do is to populate the thumbnailPhoto attribute in AD. Dirsync will take care of the rest. The only problem there might be with the rather small size that it allows, so if you are not fine with that limitation you can use the Set-UserPhoto cmdlet instead.

To remove all photos uploaded manually by the users, use Remove-UserPhoto. To disable users from uploading photos, edit the default OWA mailbox policy and set SetPhotoEnabled to $false. To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet.

June 17th, 2015 4:24am

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 5:24am

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

June 17th, 2015 5:24am

Hi,

You can create another Owa Mailbox Policy then assign this policy to those users to take a test on test environment.

Use the following command to assign policy

Set-CASMailbox -Identity user@domain.com

Best Regards.

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 5:24am

Hi,

You can create another Owa Mailbox Policy then assign this policy to those users to take a test on test environment.

Use the following command to assign policy

Set-CASMailbox -Identity user@domain.com

Best Regards.

June 17th, 2015 5:24am

I applied the rule Set-CASMailbox -Identity TrainingUser@xx.xxxx.xx and I got this message:

Warning: The command completed successfully but no settings of 'xx training' modified. How will I verify if the command actually works for the Training user that I'm working on? Thanks.

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 12:03pm

I applied the rule Set-CASMailbox -Identity TrainingUser@xx.xxxx.xx and I got this message:

Warning: The command completed successfully but no settings of 'xx training' modified. How will I verify if the command actually works for the Training user that I'm working on? Thanks.

June 17th, 2015 12:03pm

Well you need to specify the new policy there, something like:

Set-CASMailbox -Identity user@domain.com -OwaMailboxPolicy name_of_the_new_OWA_policy

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 1:15pm

Well you need to specify the new policy there, something like:

Set-CASMailbox -Identity user@domain.com -OwaMailboxPolicy name_of_the_new_OWA_policy

June 17th, 2015 1:15pm

Lynn,

I got this error when I applied Get-Mailbox ResultSize unlimited | Remove-UserPhoto

a positional parameter cannot be found that accepts argument "ResultSize"

CategoryInfo: InvalidArgument: <:> [Get-Mailbox, ParameterBindingException

FullyQualifiedErrorID: PositionalParameterNotFound, Get-Mailbox

I am trying this >Get-Mailbox ResultSize unlimited -identity testuser@xx.onmicrosoft.xx | Remove-UserPhoto

Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 5:49pm

Lynn,

I got this error when I applied Get-Mailbox ResultSize unlimited | Remove-UserPhoto

a positional parameter cannot be found that accepts argument "ResultSize"

CategoryInfo: InvalidArgument: <:> [Get-Mailbox, ParameterBindingException

FullyQualifiedErrorID: PositionalParameterNotFound, Get-Mailbox

I am trying this >Get-Mailbox ResultSize unlimited -identity testuser@xx.onmicrosoft.xx | Remove-UserPhoto

June 17th, 2015 5:49pm

I'm trying to apply and remove the picture of one user just to test if the cmdlet will work.
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2015 5:50pm

I'm trying to apply and remove the picture of one user just to test if the cmdlet will work.
June 17th, 2015 5:50pm

Thank you Vasil.  I will give this a try at work and let you know.
Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 2:42am

Thank you Vasil.  I will give this a try at work and let you know.
June 18th, 2015 2:42am

Lynn,

The cmdlet Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false, can I apply this to let's say a couple of users first before attempting to apply this rule to all?  I would like to try this on the test environment before applying it in production.

Thanks.

Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 2:51am

Lynn,

The cmdlet Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false, can I apply this to let's say a couple of users first before attempting to apply this rule to all?  I would like to try this on the test environment before applying it in production.

Thanks.

June 18th, 2015 2:51am

Hi,

  • Step1. Disable the Photo Upload so that users can't upload their own photo. Use Set-OwaMailboxPolicy cmdlet.

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false

The DisplayPhotosEnabled parameter specifies whether users see sender photos in Outlook Web App.

View or configure Outlook Web App mailbox policy properties.

https://technet.microsoft.com/en-us/library/dd351097(v=exchg.150).aspx

  • Step2. Remove the existing pictures that have been uploaded. Use Remove-UserPhoto cmdlet.

Get-Mailbox ResultSize umlimited | Remove-UserPhoto

  • Step3: Cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.

Vasil L. Michev has provided what you want.

Best Re

Free Windows Admin Tool Kit Click here and download it now
June 18th, 2015 3:31am

Hi,

  • Step1. Disable the Photo Upload so that users can't upload their own photo. Use Set-OwaMailboxPolicy cmdlet.

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false

The DisplayPhotosEnabled parameter specifies whether users see sender photos in Outlook Web App.

View or configure Outlook Web App mailbox policy properties.

https://technet.microsoft.com/en-us/library/dd351097(v=exchg.150).aspx

  • Step2. Remove the existing pictures that have been uploaded. Use Remove-UserPhoto cmdlet.

Get-Mailbox ResultSize umlimited | Remove-UserPhoto

  • Step3: Cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.

Vasil L. Michev has provided what you want.

Best Re

June 18th, 2015 3:31am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics