Hello,

We recently moved to Office 365. Our users can access their mailbox from their Desktop by launching Outlook or via Outlook Web App.  I am currently assigned as one of the Exchange Admin, so this system is new to all of us. Our current dilemma is regarding the Photo Profile.  Our management decided to not have all users upload their own photos and instead, to have us administrators control over this feature.  Right now, some of our users have already uploaded their photos.  I would really appreciate it if someone can give me some ideas about controlling this photo feature which will control both (Outlook on their Desktop & OWA).  Currently, we are on Exchange Online and we control the AD (Dirsync).  Here are things that I want to  accomplish:

1. Remove the existing pictures that have been uploaded.

2. Disable the Photo Upload so that users can't upload their own photo.

3. a cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.

We have about 4K users and about to migrate all of them soon.  Currently, we only have our Pilot Users, approx. 100 users.

Thank You in advance! 

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator Tuesday, June 16, 2015 7:10 AM

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator Tuesday, June 16, 2015 7:10 AM

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator Tuesday, June 16, 2015 7:10 AM

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator Tuesday, June 16, 2015 7:10 AM

Hello Vasil,

Thank you for the information.  Since our migration will happen very soon for all our users, I believe the first thing that I should do is to Disable users from uploading photos by doing your suggestion of (1) editing the default OWA mailbox policy and (2) set SetPhotoEnabled to $false. Please correct me if I am wrong, you said, I have to do two things and those are, use the cmdlet to disable the users from uploading photos? Is this the correct cmdlet for disabling it? (2)

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -DisplayPhotosEnabled $false -SetPhotoEnabled $false

The next one that you suggested to disable users from uploading photos, you said to also (1) edit the default OWA mailbox policy? Do you mean go to;

EAC/Permissions/User Roles/Default Role Assignment Policy and Uncheck MyContactInformation?

And finally, you said To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet (3). I'm thinking of doing this last.  Do you think it is best to do this option last after all the migration is done, or after I applied (1) and (2)?

I'm sorry to ask you this as I'm a newbie in this area, how do I take advantage of the thumbnailPhoto attribute in AD? Is there a cmdlet that I can use and apply it here on AD?How does this work?

You also mentioned about the Set-UserPhoto cmdlet? I don't exactly know how to do this? Do you have a reference site or sample where I can copy or get more information?

Thanks.

Hello Vasil,

Thank you for the information.  Since our migration will happen very soon for all our users, I believe the first thing that I should do is to Disable users from uploading photos by doing your suggestion of (1) editing the default OWA mailbox policy and (2) set SetPhotoEnabled to $false. Please correct me if I am wrong, you said, I have to do two things and those are, use the cmdlet to disable the users from uploading photos? Is this the correct cmdlet for disabling it? (2)

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -DisplayPhotosEnabled $false -SetPhotoEnabled $false

The next one that you suggested to disable users from uploading photos, you said to also (1) edit the default OWA mailbox policy? Do you mean go to;

EAC/Permissions/User Roles/Default Role Assignment Policy and Uncheck MyContactInformation?

And finally, you said To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet (3). I'm thinking of doing this last.  Do you think it is best to do this option last after all the migration is done, or after I applied (1) and (2)?

I'm sorry to ask you this as I'm a newbie in this area, how do I take advantage of the thumbnailPhoto attribute in AD? Is there a cmdlet that I can use and apply it here on AD?How does this work?

You also mentioned about the Set-UserPhoto cmdlet? I don't exactly know how to do this? Do you have a reference site or sample where I can copy or get more information?

Thanks.

If you want to centrally manage photos, best thing to do is to populate the thumbnailPhoto attribute in AD. Dirsync will take care of the rest. The only problem there might be with the rather small size that it allows, so if you are not fine with that limitation you can use the Set-UserPhoto cmdlet instead.

To remove all photos uploaded manually by the users, use Remove-UserPhoto. To disable users from uploading photos, edit the default OWA mailbox policy and set SetPhotoEnabled to $false. To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet.

If you want to centrally manage photos, best thing to do is to populate the thumbnailPhoto attribute in AD. Dirsync will take care of the rest. The only problem there might be with the rather small size that it allows, so if you are not fine with that limitation you can use the Set-UserPhoto cmdlet instead.

To remove all photos uploaded manually by the users, use Remove-UserPhoto. To disable users from uploading photos, edit the default OWA mailbox policy and set SetPhotoEnabled to $false. To centrally manage photos, use the AD attribute, or Set-UserPhoto cmdlet.

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator 7 minutes ago

Running the Set-OwaMailboxPolicy cmdlet will take care of blocking the relevant controls in OWA, so they will not be able to upload photos. If you want, you can also block the entire photo field there, so they are not confused by having the option and not being able to save it (so DisplayPhotosEnabled in addition to SetPhotoEnabled ). And of course, you can have a different OWA policy for some users, if needed. Here's some help in regards to creating OWA mailbox policies and assigning them to users: https://technet.microsoft.com/en-us/library/dd335142(v=exchg.150).aspx

Here's also the help for the Set-UserPhoto cmdlet: https://technet.microsoft.com/en-us/library/jj218694(v=exchg.150).aspx. Note that if you are going to upload large images, you have to use a different string to connect to EO, you can get more details here: http://www.404john.com/uploading-user-photos-over-10kb-to-office-365/

If you decide to use thumbnailPhoto, there are some 3rd party tools that make the process very easy. But you can also just use PowerShell (check the example script in this KB: https://support.microsoft.com/en-us/kb/2497721).

• Proposed as answer by Lynn-LiMicrosoft contingent staff, Moderator 7 minutes ago

Hi,

You can create another Owa Mailbox Policy then assign this policy to those users to take a test on test environment.

Use the following command to assign policy

Set-CASMailbox -Identity user@domain.com

Best Regards.

Hi,

You can create another Owa Mailbox Policy then assign this policy to those users to take a test on test environment.

Use the following command to assign policy

Set-CASMailbox -Identity user@domain.com

Best Regards.

I applied the rule Set-CASMailbox -Identity TrainingUser@xx.xxxx.xx and I got this message:

Warning: The command completed successfully but no settings of 'xx training' modified. How will I verify if the command actually works for the Training user that I'm working on? Thanks.

I applied the rule Set-CASMailbox -Identity TrainingUser@xx.xxxx.xx and I got this message:

Warning: The command completed successfully but no settings of 'xx training' modified. How will I verify if the command actually works for the Training user that I'm working on? Thanks.

Well you need to specify the new policy there, something like:

Set-CASMailbox -Identity user@domain.com -OwaMailboxPolicy name_of_the_new_OWA_policy

Well you need to specify the new policy there, something like:

Set-CASMailbox -Identity user@domain.com -OwaMailboxPolicy name_of_the_new_OWA_policy

Lynn,

I got this error when I applied Get-Mailbox ResultSize unlimited | Remove-UserPhoto

a positional parameter cannot be found that accepts argument "ResultSize"

CategoryInfo: InvalidArgument: <:> [Get-Mailbox, ParameterBindingException

FullyQualifiedErrorID: PositionalParameterNotFound, Get-Mailbox

I am trying this >Get-Mailbox ResultSize unlimited -identity testuser@xx.onmicrosoft.xx | Remove-UserPhoto

Lynn,

I got this error when I applied Get-Mailbox ResultSize unlimited | Remove-UserPhoto

a positional parameter cannot be found that accepts argument "ResultSize"

CategoryInfo: InvalidArgument: <:> [Get-Mailbox, ParameterBindingException

FullyQualifiedErrorID: PositionalParameterNotFound, Get-Mailbox

I am trying this >Get-Mailbox ResultSize unlimited -identity testuser@xx.onmicrosoft.xx | Remove-UserPhoto

Lynn,

The cmdlet Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false, can I apply this to let's say a couple of users first before attempting to apply this rule to all?  I would like to try this on the test environment before applying it in production.

Thanks.

Lynn,

The cmdlet Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false, can I apply this to let's say a couple of users first before attempting to apply this rule to all?  I would like to try this on the test environment before applying it in production.

Thanks.

Hi,

• Step1. Disable the Photo Upload so that users can't upload their own photo. Use Set-OwaMailboxPolicy cmdlet.

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false

The DisplayPhotosEnabled parameter specifies whether users see sender photos in Outlook Web App.

View or configure Outlook Web App mailbox policy properties.

https://technet.microsoft.com/en-us/library/dd351097(v=exchg.150).aspx

• Step2. Remove the existing pictures that have been uploaded. Use Remove-UserPhoto cmdlet.

Get-Mailbox ResultSize umlimited | Remove-UserPhoto

• Step3: Cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.
  
  

Vasil L. Michev has provided what you want.

Best Re

Hi,

• Step1. Disable the Photo Upload so that users can't upload their own photo. Use Set-OwaMailboxPolicy cmdlet.

Get-OwaMailboxPolicy | Set-OwaMailboxPolicy -SetPhotoEnabled $false

The DisplayPhotosEnabled parameter specifies whether users see sender photos in Outlook Web App.

View or configure Outlook Web App mailbox policy properties.

https://technet.microsoft.com/en-us/library/dd351097(v=exchg.150).aspx

• Step2. Remove the existing pictures that have been uploaded. Use Remove-UserPhoto cmdlet.

Get-Mailbox ResultSize umlimited | Remove-UserPhoto

• Step3: Cmdlet or script or Exchange Online Admin ability to where only the Administrator can upload the approved photos.
  
  

Vasil L. Michev has provided what you want.

Best Re