How to Change a Synchronized Microsoft 365 User's Photo and Email
Question details
The user needs to update the email address and profile photo for a Microsoft 365 account that is synchronized from an on-premises Active Directory.
- Product
- Microsoft 365 / Active Directory
- Device & OS
- not provided
- Scenario
- Updating user profile details in a hybrid Microsoft 365 environment where directories are actively synchronized from a local server.
- Observed behavior
- Profile details cannot be changed directly in the Microsoft 365 Admin Center; changes must be managed locally via Active Directory or rely on specific Exchange configurations.
Ensure you have Active Directory Administrator privileges and access to your on-premises domain controller to make directory modifications.
Update Email Address in On-Premises Active Directory
Change the user's primary email address locally before syncing to Microsoft 365.
In a synchronized environment, the on-premises Active Directory acts as the source of authority. Microsoft 365 will not allow email changes from the cloud portal.
Log into your on-premises server and open the Active Directory Users and Computers (ADUC) management console.
Locate the specific user account, right-click, and select 'Properties'. Update the email address field in the General tab, or navigate to the Attribute Editor to modify the 'proxyAddresses' attribute directly.
Force a directory synchronization using Azure AD Connect (or wait for the next scheduled sync cycle) to push the local Active Directory changes to Microsoft 365.
Update User Profile Photo via AD or Exchange Online
Assign the correct licenses or update the local photo attribute to sync the user's profile picture.
Try WPS Office as Your Lightweight Productivity Solution
While administrative tasks like Active Directory synchronization require Microsoft 365 configurations, managing your daily documents, spreadsheets, and presentations doesn't have to be expensive or complicated. WPS Office provides a complete, lightweight, and highly compatible alternative to Microsoft Office.
Frequently Asked Questions
Why can't I change the email directly in the Microsoft 365 Admin Center?
Because the user account is synchronized from an on-premises Active Directory via Azure AD Connect, the local directory serves as the source of authority. You must make changes locally and sync them to the cloud.
How long does it take for directory synchronization to update Microsoft 365?
By default, Azure AD Connect synchronizes changes every 30 minutes. However, Active Directory administrators can manually force a delta sync using PowerShell to apply changes immediately.
Can synchronized users update their own profile photos?
If the user has an Exchange Online mailbox and the organizational policies allow it, they may be able to update their photo via Outlook on the web. However, if the photo is strictly managed via the on-premises AD, an admin must update the thumbnailPhoto attribute.
