AI 軟體與企業管理
Microsoft Adds Separate Removal and Sign-In Controls After OneDrive Photos Was Accidentally Pushed to Enterprise PCs
The OneDrive photo experience, still in internal testing, was accidentally enabled more broadly, exposing an entry point on some managed Windows 11 PCs. Initially, it could not be removed separately while retaining the sync client. Microsoft has now added administrator sign-in policies and standalone uninstallation to the Microsoft 365 Roadmap, but both fixes remain scheduled for future release.
Microsoft has confirmed that the still-incubating OneDrive Photos experience “spread more broadly than expected,” causing some Windows 11 users to see a new entry point without installing it themselves. Testing shows that it is not a fully independent Store package; instead, its web-based interface is provided by `OneDrive.App.exe` in the existing OneDrive installation directory. As a result, early versions could not remove only the photo experience. If administrators uninstalled OneDrive entirely, they would also disrupt the file synchronization that enterprises rely on.
This is more than an additional photo viewer. The OneDrive photo stack includes AI Restyle and, when enabled by the user, can use facial recognition to create people groups. Microsoft’s support documentation explicitly states that facial grouping processes and stores facial scans and biometric information generated from photos. The accidental rollout does not itself mean that the feature automatically scanned every local photo, but for enterprises, the sudden appearance of a personal Microsoft account sign-in entry point, cloud photo access, and biometric recognition options changes the boundaries of data governance and support.
Microsoft has added two items to its Roadmap. The first will allow organizations to restrict the use of personal accounts in OneDrive Photos and is expected to begin rolling out in August. The second will let users uninstall the photo experience independently without removing OneDrive, stopping synchronization, or deleting files, and is expected to roll out in September. For now, engineering and IT teams should inventory OneDrive versions, processes, and sign-in states rather than resorting to unsupported measures such as deleting program directories. Roadmap dates remain subject to change, and Microsoft has not disclosed the exact number of affected devices, the activation mechanism, or a complete rollback timeline.