External Sharing - SharePoint

[Sai Gutta]

1. When External Sharing is turned on at tenant level and restricted for certain site collections, does a newly site collection by default have external sharing turned on ?

2. Do we need to specifically turn off external sharing for tenant-my.sharepoint.com site collection to disable external sharing on onedrive, or this can be achieved at the admin center of onedrive sharing page.

[#2 · Accepted solution]

@Sai Gutta It's all based on the sharing options and Onedrive is the minimum that will apply to SharePoint etc. So you have to disable per site collection if you have it enabled in OneDrive and so on. 

Excert from: https://docs.microsoft.com/en-us/onedrive/manage-sharing

• The external sharing setting for SharePoint can be more permissive than what you allow in OneDrive, but not less permissive. If you turn off external sharing for SharePoint in your organization, you can't turn it on for OneDrive.

• If you want to allow external file sharing on any sites, you need to turn it on globally (at the organization level). You can then turn it off for all other sites.

• If you turn off external sharing, any links shared externally will stop working. If you later turn it back on, the links will resume working.

[#3]

@Chris Webb - What about newly created site collections will they automatically have external sharing turned on, because the tenant has it turned on ?

[#4]

Yes but usually anonymous links you still have to allow. It will usually on one step below your setting from my experience. If you allow max setting of allow to get anyone can use links still have to set those.

[#5]

Thank you @Chris Webb 

What happens to sites that are created via Teams ? Does turning on tenant wide external sharing turn on for team sites too ? if so is powershell only way to turn it off ? and for any newly created teams should this be turned off manually.

[#6]

it's the same. powershell or you can use the new sharepoint admin center to also allow anyone links for any SharePoint site including Teams. You Select Active sites on left, select the site to enable or modify sharing settings, then on the right details pane (You might have to click the i to show it) at the bottom is External Sharing setting, you can set it here. .

[#7]

Thank you @Chris Webb I was on Classic View of SharePoint Admin Center, so was not able to find the team sites.

So there is no way to use just one switch to turn off for all the Microsoft teams sites ?

[#8]

Nope, not currently. There might be some super long drawn out powershell that can get all your Team connected sites, then loop through changing the setting via powershell, but no setting to easily do it just for Teams sites.

[#9]

Thank you @Chris Webb