SOLVED

Do Not Allow External Domain Skype Communications - Is this still valid?

%3CLINGO-SUB%20id%3D%22lingo-sub-1401619%22%20slang%3D%22en-US%22%3EDo%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401619%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20the%20middle%20of%20setting%20up%20our%20package%20as%20near%20best%20practice%20as%20possible.%20We%20are%20managing%20this%20just%20through%20research%20and%20asking%20questions%20etc.%20We%20don't%20have%20a%20trained%20M365%20person.%3C%2FP%3E%3CP%3ESmall%20company%2020%20users%20M365%2FIntune.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EFrom%20the%20things%20I%20have%20read%26nbsp%3BDo%20Not%20Allow%20External%20Domain%20Skype%20Communications%20Is%20considered%20best%20practice.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBut%20if%20its%20due%20to%20be%20discontinued%20soon%20(2021)%20is%20there%20any%20point%20in%20me%20worrying%20about%20it%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAnd%20is%20there%20a%20similar%20setting%20in%20Teams%20I%20should%20be%20considering%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1401619%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401710%22%20slang%3D%22en-US%22%3ERe%3A%20Do%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401710%22%20slang%3D%22en-US%22%3EOk%20thanks%20ill%20have%20a%20read.%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20this%20the%20best%20place%20to%20ask%20questions%20like%20this%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401761%22%20slang%3D%22en-US%22%3ERe%3A%20Do%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401761%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F592435%22%20target%3D%22_blank%22%3E%40Jeremy_Heath%3C%2FA%3E%26nbsp%3BThe%20community%20is%20a%20great%20place%20to%20ask%20questions.%20A%20lot%20of%20knowledge%20and%20experts%20in%20here%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401672%22%20slang%3D%22en-US%22%3ERe%3A%20Do%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401672%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F592435%22%20target%3D%22_blank%22%3E%40Jeremy_Heath%3C%2FA%3E%26nbsp%3BHello%2C%20you%20should%20definitely%20go%20for%20Teams-only%20mode%20if%20you're%20about%20to%20adjust%20your%20org.%20As%20for%20the%20%22external%20access%22%20the%20settings%20in%20Teams%20admin%20portal%20look%20like%20this.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fmanage-external-access%23step-1---enable-your-organization-to-communicate-with-another-teams-organization%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fmanage-external-access%23step-1---enable-your-organization-to-communicate-with-another-teams-organization%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20second%20option%20refers%20to%20'Skype%20consumer'%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Ffilters%3D%26amp%3Bsearchterms%3D53935%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.microsoft.com%2Fen-us%2Fmicrosoft-365%2Froadmap%3Ffilters%3D%26amp%3Bsearchterms%3D53935%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401911%22%20slang%3D%22en-US%22%3ERe%3A%20Do%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401911%22%20slang%3D%22en-US%22%3ESorry%20additional%20question.%3CBR%20%2F%3EThose%202%20options%20you%20flagged%20in%20teams%3CBR%20%2F%3E%3CBR%20%2F%3EFrom%20a%20security%20perspective%20how%20big%20a%20risk%20are%20they%3F%3CBR%20%2F%3EWe%20have%20certain%20times%20when%20our%20Org%20needs%20to%20join%20other%20teams%20from%20companies%20we%20work%20for%20discussions%20etc.%3CBR%20%2F%3E%3CBR%20%2F%3EIs%20allowing%20this%20classified%20as%20a%20big%20risk%20or%20not%3F%3CBR%20%2F%3E%3CBR%20%2F%3EI'm%20just%20looking%20to%20keep%20us%20secure%20within%20the%20boundaries%20that%20we%20have%20to%20work%20to.%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20second%20option%20seems%20to%20be%20more%20about%20domestic%20users%2C%20we%20only%20do%20business.%20So%20could%20we%20turn%20that%20off%20all%20together%3F%3CBR%20%2F%3E%3CBR%20%2F%3EMany%20thanks%20for%20the%20help%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1401979%22%20slang%3D%22en-US%22%3ERe%3A%20Do%20Not%20Allow%20External%20Domain%20Skype%20Communications%20-%20Is%20this%20still%20valid%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1401979%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F592435%22%20target%3D%22_blank%22%3E%40Jeremy_Heath%3C%2FA%3E%26nbsp%3BNo%20worries.%20As%20you%20say%2C%20it%20really%20comes%20down%20to%20your%20business%20needs%20and%20finding%20the%20suitable%20balance%20'secure%20yet%20user%20friendly'.%20As%20for%20my%20own%20organization%20our%20policy%20prevents%20us%20from%20enabling%20the%20'Skype%20consumer'%20feature%20so%20we%20only%20allow%20communication%20with%20Teams%2FSkype%20for%20business%20organizations%20(one%20toggle).%20In%20addition%20to%20that%20we%20also%20manage%20the%20list%20with%20allowed%20external%20domains.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ETake%20a%20look%20at%20here%20for%20a%20overview%20on%20the%20topic%20external%20access%20and%20guest%20access%20to%20see%20how%20they%20differ.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E'Communicate%20with%20users%20from%20other%20organizations%20in%20Microsoft%20Teams'%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fcommunicate-with-users-from-other-organizations%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fcommunicate-with-users-from-other-organizations%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Contributor

In the middle of setting up our package as near best practice as possible. We are managing this just through research and asking questions etc. We don't have a trained M365 person.

Small company 20 users M365/Intune.

 

From the things I have read Do Not Allow External Domain Skype Communications Is considered best practice.

 

But if its due to be discontinued soon (2021) is there any point in me worrying about it?

 

And is there a similar setting in Teams I should be considering?

5 Replies
Highlighted
Best Response confirmed by Jeremy_Heath (Occasional Contributor)
Solution

@Jeremy_Heath Hello, you should definitely go for Teams-only mode if you're about to adjust your org. As for the "external access" the settings in Teams admin portal look like this.

 

https://docs.microsoft.com/en-us/microsoftteams/manage-external-access#step-1---enable-your-organiza...

 

The second option refers to 'Skype consumer' https://www.microsoft.com/en-us/microsoft-365/roadmap?filters=&searchterms=53935

Highlighted
Ok thanks ill have a read.

Is this the best place to ask questions like this?
Highlighted

@Jeremy_Heath The community is a great place to ask questions. A lot of knowledge and experts in here :)

Highlighted
Sorry additional question.
Those 2 options you flagged in teams

From a security perspective how big a risk are they?
We have certain times when our Org needs to join other teams from companies we work for discussions etc.

Is allowing this classified as a big risk or not?

I'm just looking to keep us secure within the boundaries that we have to work to.

The second option seems to be more about domestic users, we only do business. So could we turn that off all together?

Many thanks for the help
Highlighted

@Jeremy_Heath No worries. As you say, it really comes down to your business needs and finding the suitable balance 'secure yet user friendly'. As for my own organization our policy prevents us from enabling the 'Skype consumer' feature so we only allow communication with Teams/Skype for business organizations (one toggle). In addition to that we also manage the list with allowed external domains.

 

Take a look at here for a overview on the topic external access and guest access to see how they differ.

 

'Communicate with users from other organizations in Microsoft Teams'

https://docs.microsoft.com/en-us/microsoftteams/communicate-with-users-from-other-organizations