Forum Discussion

Iron Contributor

Sep 08, 2017

External guests in O365 groups have access to people directory and other sites w/o invitation

We have guest access to Office 365 Groups enabled at tenant level. So group owners can invite people outside the organization to their Office 365 group. The external guest can access the SharePoint s...

groups

TobiasAT

Iron Contributor

Sep 11, 2017

We disabled the 'Everyone' claim in the people picker and then iterated through the entire tenant to remove all occurrences of it where it was not required by the system.

Hello David, does this also limit the people search results? Or do we have another option to hide people results for guests?

David Rosenthal

Microsoft

Sep 11, 2017

Look at this parameter available in the same cmdlet, but look closely and think about the impact of setting this to True as then sharing will get more difficult for your internal users as well:

SearchResolveExactEmailOrUPN

Optional

System.Boolean

Removes the search capability from People Picker.

The valid values are:

True- Removes search functionality from People Picker. Users will be required to enter a full email address or UPN for a person in People Picker to resolve.
For more information about how to remove search functionality, see Manage Query Rules, Add and edit user profile properties, or Plan to disable people discovery in OneDrive for Business and SharePoint Online
Note:
Recently resolved names will still appear in the list.
False- Restores default search functionality.

HaraldRau
Iron Contributor
Sep 18, 2017
Thanks, David, for your reply! I understand this setting will remove the search option from the People Picker such that users can't search for people anymore.
However, the original concern was more regarding the native SharePoint search - it returns sites, documents, and people as a search result. And the people results list shows the full contact details and other properties of the individuals such that an external guest can perform some intensive research on our internal staff. Is there a way to change this behaviour? Can those people information be restricted to "everyone except external"?
Thanks for your great help!