Home

If Guest user can be forbidden to view internal email address?

chico.f chico.f
Occasional Contributor

we known that guest cannot view the org of company, if it's possible to prevent guest to view the member's email address in Teams? Any powershell can do that?

5 Replies
Not that i'm aware of this moment, please create it at feedback, it's a good security feature. (https://microsoftteams.uservoice.com/forums/555103-public)

Well, there are few options available to try, although I haven't bother doing so yet so I cannot be sure if they will work. On the AAD side of things, you can toggle the "UsersPermissionToReadOtherUsersEnabled" setting, which will restrict users (regular and guest) from viewing other user's details. That's for AAD though, for Exchange/Skype/Teams and every other app that leverages the GAL, you can instead try GAL segmentation, splitting the GAL between regular users and Guests. The steps are explained here: https://technet.microsoft.com/en-us/library/hh529948(v=exchg.150).aspx

 

I just tried the first one it is only for the view in AAD, it will not have an effect on MS Teams.

Yeah, Vasil, that option is actually huge thou IMO cause if that is on anyone can log into portal.azure.com and view your entire AD Directory lol..... found this out awhile back and was like woah this isn't good. Wish I had known about it when setting up 365 I would have turned it off originally.

They can still see pretty much all the interesting details as part of the GAL anyway. GAL segmentation is the way to address this, but I haven't tested it with any Teams-related scenario yet.

Related Conversations
How to Prevent Teams from Auto-Launch
chenrylee in Microsoft Teams on
28 Replies
Early preview of Microsoft Edge group policies
Sean Lyndersay in Discussions on
65 Replies
*Updated 9/3* Syncing in Microsoft Edge Preview Channels
Elliot Kirk in Articles on
201 Replies
Tabs and Dark Mode
cjc2112 in Discussions on
2 Replies