[O365] Disable group creation and upload user photo

[zebulunn]

Hello,

 

A student is repeatedly creating groups that sync into our global address book on Outlook.

We have a student role assignment policy with all functions unchecked and is definitely applied to the student in question.

 

Q1: Is there something else that needs doing to disable group creation for specific users?

 

Q2: Is there a method of preventing non-AD synced groups appearing in the global address book?

 

I have used the powershell command

Set-OwaMailboxPolicy -Identity Student -SetPhotoEnabled $False

to disable changing user photo.

I then used another command (can't remember) to apply the 'Student' mailbox policy to one student.

However the student managed to change their picture again today.

 

Q3: What else am I supposed to do to disable the picture option?

[simpsonj]

Remembering looking at this a little while back...

 

This site shows how to disable group creation for a single user, or group of users:

 

https://www.mavention.nl/blog/disable-office-365-groups-specific-users

 

Not sure I can help with the photos though...

[zebulunn]

Thanks.

Today I have ran these commands:

Set-OwaMailboxPolicy -Identity "Student" -GroupCreationEnabled $false
Set-OwaMailboxPolicy -Identity "Student" -SetPhotoEnabled $false
Set-CASMailbox -Identity [email protected]  -OWAMailboxPolicy "Student"