how I can remove users display picture in Exchange 2013

Dear Experts,

Please advise, how I can remove users display picture in Exchange 2013 on OU or Group level and also wants to disable the upload option.

We have Exchange 2013 and Active directory is Windows 2008 R2

Thanks
tabreedAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Iain MacMillanIT Regional Manager - UKCommented:
sounds like someone may have set a utility to do this, we use Code Two's Active Directory Photo app to update staff's AD pic, there is no easy way to do it via AD edit.  This is the only GUI way i know to add/remove pics, but you need DA rights to do this, so i doubt those profiles with pics you have, were done by your users.

They can always add ANY picture to their own contact files, that cannot be helped or stopped unless you set some very tough Office policies, and it would likely be more grief than you want.

http://www.codetwo.com/freeware/active-directory-photos/ -- this is a free app and will help you control AD profile pictures.  Its actually quite handy when you have a lot of staff/users, especially new ones, as they get to see who is sending them internal emails.  The AD pictures only show on internal Exchange use with Outlook client/domain.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Kash2nd Line EngineerCommented:
I am not sure. Are you referring to thumbnail photo. Have a look at this solution posted here previously >>> http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26840971.html
Md. MojahidCommented:
If you talking about GAL picture

Set-Mailbox <Mailbox> -RemovePicture
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

Jian An LimSolutions ArchitectCommented:
STEP 1
disable ability to edit the photo in OWA

1. Login to Exchange Admin Center to create a new OWA policy. Please go to permissions -> Outlook Web App policies, then click the add icon.

2. Set the OWA policy to disable user change photo, please follow these steps:
Set-OwaMailboxPolicy -Name "NoPicChange" -SetPhotoEnabled $false


STEP 2
remove SELF (or untick allow on SELF) to "Write thumbnailPhoto" in Active directory

http://blog.cjwdev.co.uk/2010/11/03/the-thumbnailphoto-attribute-explained/ <-- this explain how to do enable it in bulk, so you need to reverse the change.
http://www.thumbnailphoto.net/2010/11/active-directory-thumbnailphoto-attribute-permissions/ <-- another blog talking on enable it, what you need to do is reverse it .
tabreedAuthor Commented:
Thanks and sorry for the delay response, I tested CodeTwo Active Directory Photos 1.1.2 with this i am able to see the user's profile pictures but I couldn’t able to remove pictures from their profile there is no save option. Please advice


Set-Mailbox <Mailbox> -RemovePicture this command will not full file my requirements since there are many users and I need to remove and disable the upload opinion from only some user’s (300) not all.


Please advice

Thanks
Jian An LimSolutions ArchitectCommented:
set-mailbox do because you can use powershell script to script it easily.

like
get-content allusertoremove.txt | set-mailbox -removepicture

this will basically remove everyone in the txt file.
tabreedAuthor Commented:
Thank you so much, do I need to run from AD or Exchange. please advice
Jian An LimSolutions ArchitectCommented:
this need to run on Exchange POwershell.
Again, this is to remove what is has,
to prevent user from making changes again, you need to do what i written in ID:40905435
Iain MacMillanIT Regional Manager - UKCommented:
you don't need to save using the ADP application, you just click to remove the pictures (its done and updated right away), and by using the other info supplied by Limjianan, you should be able to stop anyone else updating/adding photos back in.
tabreedAuthor Commented:
I have tired, when I click on remove button it is removing but if I refresh or sin in again all the removed pictures are coming back. please advice
Iain MacMillanIT Regional Manager - UKCommented:
not sure why thats happening, i just remove and then close off the app.  AD will sync/replicate to the other DC's and the images are removed for me.
Jian An LimSolutions ArchitectCommented:
try to hack it using powershell
https://joeit.wordpress.com/2011/12/02/powershell-function-remove-adphoto/

(run the remove-adphoto function)
import-module activedirectory
get-content allusertoremove.txt |remove-ADPhoto

and where is the remove button?
tabreedAuthor Commented:
Thanks MacMillan & limjianan, finally CodeTwo worked after AD replication it has been removed.

please advice how can I disable the uploading pictures option for OU level since I don't want to block for all.
Iain MacMillanIT Regional Manager - UKCommented:
i was under the impression you needed DA or Exch Admin rights to add photos to AD profiles, so the number of staff that can would be small, so you wouldn't need to lock it down per say.  Forgot that they can change their own via OWA (which my users haven't realised yet).

otherwise I think you only have an option to block all, not by OU i don't think.
Jian An LimSolutions ArchitectCommented:
It is possible

you just need to remove SELF (or untick allow on SELF) to "Write thumbnailPhoto" in Active directory for every user you want to disable
by doing so,
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.