Manage Teams guest access

%3CLINGO-SUB%20id%3D%22lingo-sub-1962907%22%20slang%3D%22en-US%22%3EManage%20Teams%20guest%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1962907%22%20slang%3D%22en-US%22%3E%3CP%3EAs%20I%20understand%2C%20Guest%20access%20for%20Microsoft%20Teams%20is%20currently%20off%20by%20default%20for%20any%20given%20tenant%20-%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fset-up-guests%3C%2FA%3E.%26nbsp%3B%20However%2C%20it's%20not%20clear%20whether%20a%20given%20tenant%20has%20Guest%20access%20setting%20set%20to%20%22Off%22%20instead%20of%20%22Service%20default%22%20-%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fcollaborate-as-team%23teams-guest-access-settings%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fcollaborate-as-team%23teams-guest-access-settings%3C%2FA%3E.%3CBR%20%2F%3E%3CBR%20%2F%3E1.%20Is%20it%20possible%20to%20check%20whether%20a%20given%20tenant%20has%20Guest%20access%20disabled%20(Guest%20access%20setting%20is%20set%20to%20%22Off%22%20instead%20of%20%22Service%20default%22)%20via%20PowerShell%20or%20using%20an%20API%3F%26nbsp%3B%20As%20I'm%20managing%20hundreds%20of%20tenants%2C%20I%20would%20like%20to%20know%20a%20way%20to%20check%20this%20without%20having%20to%20sign%20into%20each%20%3CEM%3ETeams%20admin%20center%3C%2FEM%3E%20individually.%3CBR%20%2F%3E%3CBR%20%2F%3E2.%20If%20I%20do%20have%20to%20check%20this%20manually%20for%20each%20tenant%2C%20how%20do%20I%20distinguish%20in%20the%20%3CEM%3ETeams%20admin%20center%3C%2FEM%3E%20whether%20the%20Guest%20access%20setting%20is%20set%20to%20%22Off%22%20instead%20of%20%22Service%20default%22%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20realize%20I%20can%20check%20Guest%20access%20and%20disable%20it%20for%20individual%20Teams%20as%20shared%20in%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-teams%2Fallow-or-block-guest-users-from-a-specific-team-in-microsoft%2Fm-p%2F175918%22%20target%3D%22_blank%22%3Ehttps%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-teams%2Fallow-or-block-guest-users-from-a-specific-team-in-microsoft%2Fm-p%2F175918%20%3C%2FA%3E-%20assuming%20this%20is%20still%20current.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%20class%3D%22lia-code-sample%20language-powershell%22%3E%3CCODE%3E%26lt%3B%23%0AConfiguration%20Change%20in%20Guest%20access%20for%20Microsoft%20Teams%20%0AMC228482%20%0A%0A%20Major%20update%3A%20Announcement%20started%20%0A%20Applied%20To%3A%20All%20%0A%0AWe're%20making%20some%20changes%20to%20the%20default%20setting%20for%20Guests%20in%20Microsoft%20Teams%0ABeginning%20on%20February%208th%2C%202021%2C%20we%20are%20turning%20on%20Guest%20access%20in%20%0AMicrosoft%20Teams%20by%20default%20for%20any%20customers%20who%20have%20not%20configured%20%0Athis%20setting.%20This%20will%20bring%20Teams%20Guest%20capability%20into%20alignment%20with%20%0Athe%20rest%20of%20the%20suite%2C%20where%20the%20setting%20is%20already%20on%20by%20default.%20%0A%0A%0A%5BKey%20Points%3A%5D%0A%E2%80%A2%20Timing%3A%20February%208th%2C%202021%0A%E2%80%A2%20Admin%20control%3A%20Admin%20center%20UI%0A%E2%80%A2%20Action%3A%20Review%20and%20set%20appropriate%20configuration%0A%5BHow%20this%20will%20affect%20your%20organization%3A%5D%0AWhen%20this%20change%20is%20implemented%20if%20you%20have%20not%20already%20configured%20Guest%20%0Aaccess%20capability%20in%20Microsoft%20Teams%2C%20that%20capability%20will%20be%20enabled%20in%20%0Ayour%20tenant.%20With%20guest%20access%20enabled%2C%20you%20can%20provide%20access%20to%20teams%20%0Aand%20other%20resources%20to%20people%20outside%20your%20organization%20while%20%0Amaintaining%20control%20over%20your%20corporate%20data.%20%0A%0A%0A%5BWhat%20you%20need%20to%20do%20to%20prepare%3A%5D%0APrior%20to%20this%20change%20taking%20effect%20on%20February%208th%202021%2C%20if%20you%20want%20%0AGuest%20access%20to%20remain%20disabled%20for%20your%20organization%2C%20you%20will%20need%20to%20%0Aconfirm%20that%20the%20Guest%20access%20setting%20is%20set%20to%20%22Off%22%20instead%20of%20%0A%22Service%20default%22.%20Instructions%20for%20how%20to%20configure%20the%20Teams%20guest%20%0Aaccess%20settings%20can%20be%20found%20here%3A%20Teams%20guest%20access%20settings%20%0A%5Bhttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fsolutions%2Fcollaborate-as-team%23teams-guest-access-settings%5D%20%0A%0A%0A%23%26gt%3B%3C%2FCODE%3E%3C%2FPRE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1962907%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EGuest%20Access%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EPowerShell%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1966257%22%20slang%3D%22en-US%22%3ERe%3A%20Manage%20Teams%20guest%20access%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1966257%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20for%20your%20reply%2C%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F551905%22%20target%3D%22_blank%22%3E%40bec064%3C%2FA%3E%20.%3CBR%20%2F%3E%3CBR%20%2F%3E2.%20With%20regard%20to%20distinguishing%20in%20the%20%3CEM%3ETeams%20admin%20center%3C%2FEM%3E%20whether%20the%20Guest%20access%20setting%20is%20set%20to%20%22Off%22%20instead%20of%20%22Service%20default%22%2C%20I%20created%20a%20new%20tenant%20and%20can%20confirm%3A%3CBR%20%2F%3E%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fadmin.teams.microsoft.com%2Fcompany-wide-settings%2Fguest-configuration%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fadmin.teams.microsoft.com%2Fcompany-wide-settings%2Fguest-configuration%3C%2FA%3E%20shows%3A%3CBR%20%2F%3E%22Service%20default%3A%20Off%22%3C%2FP%3E%3CDIV%20class%3D%22mceNonEditable%20lia-copypaste-placeholder%22%3E%26nbsp%3B%3C%2FDIV%3E%3CP%3E%5Bcan't%20seem%20to%20%22insert%20photo%22%20screenshot%20in%20post%20so%20see%20attached%5D%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E...%20now%20to%20find%20out%20whether%20this%20is%20exposed%20via%20PowerShell%20anywhere.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Occasional Contributor

As I understand, Guest access for Microsoft Teams is currently off by default for any given tenant - see https://docs.microsoft.com/en-us/microsoftteams/set-up-guests.  However, it's not clear whether a given tenant has Guest access setting set to "Off" instead of "Service default" based on the information and screenshot in https://docs.microsoft.com/en-us/microsoft-365/solutions/collaborate-as-team#teams-guest-access-sett....

1. Is it possible to check whether a given tenant has Guest access disabled (Guest access setting is set to "Off" instead of "Service default") via PowerShell or using an API?  As I'm managing hundreds of tenants, I would like to know a way to check this without having to sign into each Teams admin center individually.

2. If I do have to check this manually for each tenant, how do I distinguish in the Teams admin center whether the Guest access setting is set to "Off" instead of "Service default"?

 

I realize I can check Guest access and disable it for individual Teams as shared in https://techcommunity.microsoft.com/t5/microsoft-teams/allow-or-block-guest-users-from-a-specific-te...- assuming this is still current.

 

 

 

 

 

<#
Configuration Change in Guest access for Microsoft Teams 
MC228482 

	Major update: Announcement started	
	Applied To: All	

We're making some changes to the default setting for Guests in Microsoft Teams
Beginning on February 8th, 2021, we are turning on Guest access in 
Microsoft Teams by default for any customers who have not configured 
this setting. This will bring Teams Guest capability into alignment with 
the rest of the suite, where the setting is already on by default. 


[Key Points:]
•	Timing: February 8th, 2021
•	Admin control: Admin center UI
•	Action: Review and set appropriate configuration
[How this will affect your organization:]
When this change is implemented if you have not already configured Guest 
access capability in Microsoft Teams, that capability will be enabled in 
your tenant. With guest access enabled, you can provide access to teams 
and other resources to people outside your organization while 
maintaining control over your corporate data. 


[What you need to do to prepare:]
Prior to this change taking effect on February 8th 2021, if you want 
Guest access to remain disabled for your organization, you will need to 
confirm that the Guest access setting is set to "Off" instead of 
"Service default". Instructions for how to configure the Teams guest 
access settings can be found here: Teams guest access settings 
[https://docs.microsoft.com/en-us/microsoft-365/solutions/collaborate-as-team#teams-guest-access-settings] 


#>

 

 

 

 

 

2 Replies

1. Good question! Don’t know and have not given it any thought until now.

2. You’ll see On, Off and Service default: Off if I dont recall wrong. Can’t check now.

 

btw, if you’re using On or Off you don’t have to worry about the change. As On is already allowing guest access and Off is to ”opt-out”.

Thank you for your reply, @bec064 .

2. With regard to distinguishing in the Teams admin center whether the Guest access setting is set to "Off" instead of "Service default", I created a new tenant and can confirm:

https://admin.teams.microsoft.com/company-wide-settings/guest-configuration shows:
"Service default: Off"

 

[can't seem to "insert photo" screenshot in post so see attached]


... now to find out whether this is exposed via PowerShell anywhere.