Forum Discussion
Best approach to prevent external users from accessing sharepoint online
kevinmckeown8 wrote:Are you familiar with the All People page/All Users List for a site collection? You can get to it by appending this to your site collection URL: /_layouts/15/people.aspx?MembershipGroupId=0
You can delete users from the entire site collection from this page.
kevinmckeown8Yes i know about this list, but you mean we can remove a guest account from this list instead of removing the Guest from Office 365 admin >> Guest accounts? if this is the case, then the issue will be that i will need to check this list on all the site collections... unlike removing the Guest from Office 365 admin >> Guest accounts, which should remove the Guest account globally.. is my points valid?
Based on results of your own testing described above, it sounds like you would need to remove the user in both places regardless of where you delete them first, SharePoint and Office 365 Admin.
And yes, since these All People pages are specific to a site collection, you would need to check it on all site collections.
kevinmckeown8 wrote:Based on results of your own testing described above, it sounds like you would need to remove the user in both places regardless of where you delete them first, SharePoint and Office 365 Admin.
kevinmckeown8 the test i did showed that removed user can still access the site, but when i logout >> re-login i got Access Denied. but i am sure that if we remove Guest account from Office 365 Guest account list, then the gust account will not be able to access the site after a specific period of time (1/2 hour for example).. i did not find any official documentation talking about this, an all the official docs mentioned if we want to prevent a Guest account from accessing SP online and office 365 then we can remove the Guest account from Office 365 admin center >> Guest accounts list... and no one mentioned that we need to remove it from the user list under each site collection.