Remove share with People in TenantName option

Brass Contributor

Our InfoSec team has requested that we remove the Shared with Everyone option which we have done from the People Picker. However, the sharing option for "People in TenantName" still remains. If users pick this option it creates the equivalent of an All Authenticated User link to the file which can be sent to anyone in the company. Is there any way to remove this feature or has anyone else mitigated the risk in another way? If we cant remove it then a setting to expire the link after a set period of time would be helpful.

8 Replies
Hi Glen,

I have not found any such way of doing this. I don't think Microsoft have fully acknowledged that some organizations want/need to silo data between departments.

In saying that, it may be possible to do through the use of Data Classification Tags, however I am yet to play around with that functionality.

Daniel
You cannot remove that option, just hide it but this will not prevent to share with everyone

Hi Glen,

 

You're referring to the link that works for "Everyone in TenantName" correct? This can be disabled on a per-site collection basis using PowerShell. The command is:

 

 

Set-SPOSite -DisableCompanyWideSharingLinks $true

Documentation is here.

 

Hope that helps!

 

Stephen Rice

OneDrive Program Manager II

Thanks Stephen for the info. I am able to set this on our top-level SharePoint site(-identity https://tenant.sharepoint.com) but that doesn't apply to the OneDrive sites. I get an error when I try the same command on the Onedrive sites (-identity https://tenant-my.sharepoint.com)

Error message:
set-sposite : The property DisableCompanyWideSharingLinks cannot be set on the MySite host.

Hi Glen,

 

We don't support disabling internal links on the My Site host unfortunately. You can do it on individual OneDrives though by using the identity like: "https://contoso-my.sharepoint.com/personal/srice_contoso_com"

 

Thanks,

 

Stephen Rice
OneDrive Program Manager II

Most unfortunate. Applying that to every existing and new site would be tedious and an audit nightmare. At least it works for SharePoint Team Site Collections but are there any future plans to support it for My Site host? If we had to come up with a way to apply this manually for a time that would be fine knowing that it was on the future roadmap.

Hi Glen,

 

 

We don't have this in our backlog of work unfortunately. I definitely recommend submitting the idea in onedrive.uservoice.com though as that's one of the best ways to raise the priority with the product team. Thanks,

 

Stephen Rice

OneDrive Program Manager II