Admin-Mandated Anonymous Link Expiration

[Joelle Bejarano]

We are interested in hearing from other K-12 school districts or higher education entities regarding their use of admin-mandated anonymous link expiration on OneDrive for Business resources.

We’re interested in the security benefits of enforcing expirations; however, cautious about setting a timeframe that is too aggressive for some of our usage scenarios. The current options for expirations include never, 90 days, 180 days, and 1 year; however, some of our usage scenarios necessitate sharing for more than 1 year. Ideally, there would be some timeframe(s) between 1 year and never, so we’re curious how other customers in the education vertical have addressed this concern. 

[#2]

You can set a custom expiration window via PowerShell, anything between 1 day and 2 years.

[#3]

Hi @Joelle Bejarano,

As Vasil mentioned, both the Powershell and UX should allow you to set a value between 1 and 730 (2 years). Do you have a timeframe in mind you were hoping to set it? When we built the feature, we figured that 2 years would be a fairly safe margin security wise. Thanks for the feedback!

Stephen Rice

OneDrive Program Manager II

[#4]

Fantastic! It didn't occur to our team that using PowerShell to set this was a possibility. With that in mind, we'll likely be setting it to something like 18 months to account for the months our staff and students are out on summer break. I greatly appreciate your timely response!