Photos should sync periodically from M365, not just on the initial pull. This would help with new employees. We also need to be able to prevent employees from setting their own photos.