Yammer ETR to control external messaging

%3CLINGO-SUB%20id%3D%22lingo-sub-206292%22%20slang%3D%22en-US%22%3EYammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-206292%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20followed%20the%20guidance%20to%20enforce%20Exchange%20Online%20Exchange%20Transport%20Rules%20(ETRs)%20in%20Yammer.%20I%20have%20created%20a%20rule%20in%20Exchange%20Online%20to%20apply%20if%20the%20recipient%20is%20located%20'Outside%20the%20organization'%20and%20the%20sender%20address%20includes%20'%40yammer.com'%20then%20'deliver%20the%20message%20to%20hosted%20quarantine'.%20I%20gave%20it%20sufficient%20time%20(couple%20of%20hours)%20before%20testing.%20However%2C%20I%20can%20still%20send%20external%20messages%20and%20also%20invite%20external%20members%20to%20my%20Yammer%20group.%20Checking%20the%20Exchange%20Online%20quarantine%20shows%20nothing.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20ideas%20why%20this%20is%20not%20working%3F%20The%20l%3CSPAN%3East%20synced%20at%20shows%20blank%20in%20Yammer%20external%20messaging%20settings.%20Not%20sure%20if%20this%20is%20an%20issue.%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20Yammer%20use%20our%20Exchange%20Online%20service%20for%20sending%20external%20messages%20and%20group%20invites%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWould%20Yammer%20honor%20the%20rule%20if%20modified%20to%20setup%20a%20white%20list%20of%20external%20email%20addresses%20%5C%20domains%20by%26nbsp%3Badding%26nbsp%3BException%20%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-206292%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EYammer%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-332416%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-332416%22%20slang%3D%22en-US%22%3EYou're%20right.%20It%20needs%20more%20tests%20to%20validate%20that%20the%20Carmen's%20rule%20is%20responsible%20of%20the%20blocking%20process.%20Perhaps%20it%20was%20a%20coincidence%20and%20I%20should%20had%20wait%20one%20hour%20more.%3CBR%20%2F%3EI%20will%20test%20it%20with%203%20tenants%20%3A%20one%20with%20the%20documentation%20rule%2C%20one%20without%20rules%20and%20one%20with%20the%20carmen's%20rule.%3CBR%20%2F%3E%3CBR%20%2F%3ETo%20be%20continued....%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330077%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330077%22%20slang%3D%22en-US%22%3E%3CP%3EInteresting%2C%20because%20that's%20not%20the%20case%20for%20the%20network%20I'm%20looking%20at%20right%20now.%20We%20only%20checked%20that%20box%20and%20users%20can't%20create%20external%20groups%20or%20add%20external%20users%20to%20conversations.%20No%20need%20to%20dive%20into%20Exchange%20and%20this%20was%20also%20not%20required%20for%20other%20networks%20where%20I%20updated%20this%20setting.%20Not%20sure%20why%20it's%20not%20working%20for%20you%2C%20but%20for%20me%20it's%20working%20exactly%20the%20way%20it%20has%20been%20documented%20by%20Microsoft.%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EUpdate%3A%20just%20checked%20the%20documentation.%20The%20Exchange%20Online%20part%20is%20new.%20Not%20sure%20why%20they%20changed%20it.%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-330008%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-330008%22%20slang%3D%22en-US%22%3E%3CP%3EWorking%20fine%20with%20your%20rule%20Carmen.%26nbsp%3B%3C%2FP%3E%3CP%3EThank%20you%20so%20much!%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20776px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F71834iE5DD3E1D98993FF5%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22ExternalUserPrevented.png%22%20title%3D%22ExternalUserPrevented.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329970%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329970%22%20slang%3D%22en-US%22%3E%3CP%3EThank%20you%20Carmen%20for%20the%20precision.%20I%20try%20it%20now%20and%20I'd%20let%20you%20know%20when%20it%20will%20be%20updated.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20744px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F71827i04C67553416FCBA2%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22CarmensRule.png%22%20title%3D%22CarmensRule.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EKind%20regards%2C%3C%2FP%3E%3CP%3EFred%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329969%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329969%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Federic%2C%3C%2FP%3E%3CP%3EAs%20mentioned%20in%20my%20earlier%20post%2C%20I%20had%20issues%20with%20this%20and%20I%20called%20Microsoft%20to%20find%20a%20resolution.%26nbsp%3B%3C%2FP%3E%3CP%3EThe%20resolution%20was%20to%20create%20the%20Exchange%20rule%20as%20per%20the%20screenshot%20included%20in%20my%20earlier%20post.%20It%20seems%20that%20the%20official%20documentation%20is%20not%20complete.%26nbsp%3B%3C%2FP%3E%3CP%3EHope%20this%20helps%20and%20works%20for%20you%20as%20well%2C%20let%20me%20know%20.%3C%2FP%3E%3CP%3EThanks%2C%3C%2FP%3E%3CP%3ECarmen%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329966%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329966%22%20slang%3D%22en-US%22%3E%3CP%3ETwo%20days%20after%2C%20parameter%20is%20still%20not%20sync%20(cf.%20screenshoot)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20499px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F71820iA6AA60F2189277D4%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22ETR.png%22%20title%3D%22ETR.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3EThe%20Exchange%20rule%20(must%20have%20one%20no%20matters%20what)%20as%20described%20in%20official%20documentation%20%3A%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fyammer%2Fwork-with-external-users%2Fcontrol-external-messaging-with-exchange%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fyammer%2Fwork-with-external-users%2Fcontrol-external-messaging-with-exchange%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Elooks%20like%20this%20%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20654px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F71822i0FF86DAAE5A5E486%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22ExRule.png%22%20title%3D%22ExRule.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329960%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329960%22%20slang%3D%22en-US%22%3E%3CP%3EThat%20information%20is%20not%20entirely%20correct.%26nbsp%3B%3C%2FP%3E%3CP%3EIn%20order%20to%20disable%20external%20messaging%20in%20Yammer%20you%20require%20two%20pieces%3A%3C%2FP%3E%3COL%3E%3CLI%3E%26nbsp%3B%3CSPAN%3EEnforce%20your%20Exchange%20Online%20Exchange%20Transport%20Rules%20(ETRs)%20in%20Yammer%22%3C%2FSPAN%3E%20as%20per%20Pooya's%20comment%26nbsp%3B%3C%2FLI%3E%3CLI%3EA%20rule%20in%20Exchange%20online.%20The%20rule%20should%20look%20like%20this%3A%3C%2FLI%3E%3C%2FOL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20616px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F71819iAE74760CC108F892%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%222019-02-03_14-50-52.png%22%20title%3D%222019-02-03_14-50-52.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329676%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329676%22%20slang%3D%22en-US%22%3E%3CP%3EHave%20done%20this%20multiple%20times%20and%20it%20always%20worked%20correctly.%20Have%20it%20enabled%20now%20for%20one%20of%20my%20customers%20without%20issues.%20No%20need%20to%20go%20into%20Exchange%20Online.%20There%20is%20a%20setting%20in%20the%20Yammer%20admin%20portal%20under%20%22security%22%20named%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3E%22Enforce%20your%20Exchange%20Online%20Exchange%20Transport%20Rules%20(ETRs)%20in%20Yammer%22%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%3EAfter%20enabling%20that%2C%20external%20messaging%20was%20disabled.%20You%20do%20have%20to%20reach%20out%20to%20Microsoft%20support%20if%20you%20want%20to%20allow%20your%20users%20to%20join%20external%20groups%20of%20other%20networks.%26nbsp%3B%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329675%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329675%22%20slang%3D%22en-US%22%3ENo%20I%20was%20never%20able%20to%20get%20this%20to%20work%2C%20it's%20broken.%20Microsoft%20disabled%20external%20group%20creation%20in%20the%20backend.%20This%20disabled%20external%20groups%20across%20the%20board%20though.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-329657%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-329657%22%20slang%3D%22en-US%22%3E%3CP%3ESame%20issue%20too.%20No%20resolution%20for%20the%20moment.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20found%20%22%3CSPAN%20class%3D%22%22%3E%3CSTRONG%3EThese%20settings%20will%20take%20approx.%2030%20hours%20to%20sync%3C%2FSTRONG%3E%20and%20disable%20creation%20of%20External%20Groups%20to%20all%20users.%20We%20cannot%20authorise%20for%20only%20admins.%26nbsp%3BExternal%20group%20creation%20will%20be%20disabled%20for%20all%20users%20including%20admins.%22%3C%2FSPAN%3E%3CSPAN%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22%22%3E%3CA%20href%3D%22https%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fall%2Fhow-to-prevent-users-to-create-groups-by%2F98e7be4f-f717-4d47-a223-a994154bcf7c%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fanswers.microsoft.com%2Fen-us%2Fmsoffice%2Fforum%2Fall%2Fhow-to-prevent-users-to-create-groups-by%2F98e7be4f-f717-4d47-a223-a994154bcf7c%3C%2FA%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-313459%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-313459%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Paul%2C%20were%20you%20able%20to%20get%20this%20working%3F%20What%20was%20the%20resolution%3F%20I%20have%20the%20same%20issue%20with%20ETR%20and%20Yammer%20external%20messaging%20and%20I%20am%20interested%20in%20a%20solution%20if%20you%20have%20one.%20Thanks.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-207408%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-207408%22%20slang%3D%22en-US%22%3E%3CP%3EThought%20I'll%20leave%20an%20update.%20Opened%20a%20case%20with%20Microsoft%20and%20its%20being%20investigated%20by%20the%20Yammer%20team.%20Will%20post%20if%20there%20is%20a%20resolution.%20At%20the%20moment%20it%20seems%20like%20ETR%20in%20Yammer%20doesn't%20work%20as%20it%20says%20on%20the%20tin%2C%20the%20only%20other%20option%20would%20be%20to%20disable%20in%20the%20back-end.%20I%20wonder%20if%20anyone%20else%20have%20successfully%20implemented%20ETR%20in%20Yammer%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1092611%22%20slang%3D%22en-US%22%3ERe%3A%20Yammer%20ETR%20to%20control%20external%20messaging%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1092611%22%20slang%3D%22en-US%22%3E%3CP%3EFor%20tenants%20in%20Europe%2C%20external%20groups%20aren't%20available!%3C%2FP%3E%3C%2FLINGO-BODY%3E
Contributor

Hi,

 

I have followed the guidance to enforce Exchange Online Exchange Transport Rules (ETRs) in Yammer. I have created a rule in Exchange Online to apply if the recipient is located 'Outside the organization' and the sender address includes '@yammer.com' then 'deliver the message to hosted quarantine'. I gave it sufficient time (couple of hours) before testing. However, I can still send external messages and also invite external members to my Yammer group. Checking the Exchange Online quarantine shows nothing. 

 

Any ideas why this is not working? The last synced at shows blank in Yammer external messaging settings. Not sure if this is an issue.

 

Does Yammer use our Exchange Online service for sending external messages and group invites?

 

Would Yammer honor the rule if modified to setup a white list of external email addresses \ domains by adding Exception ?

13 Replies

Thought I'll leave an update. Opened a case with Microsoft and its being investigated by the Yammer team. Will post if there is a resolution. At the moment it seems like ETR in Yammer doesn't work as it says on the tin, the only other option would be to disable in the back-end. I wonder if anyone else have successfully implemented ETR in Yammer?

Hi Paul, were you able to get this working? What was the resolution? I have the same issue with ETR and Yammer external messaging and I am interested in a solution if you have one. Thanks.

Same issue too. No resolution for the moment.

 

I found "These settings will take approx. 30 hours to sync and disable creation of External Groups to all users. We cannot authorise for only admins. External group creation will be disabled for all users including admins."

 

https://answers.microsoft.com/en-us/msoffice/forum/all/how-to-prevent-users-to-create-groups-by/98e7...

 

No I was never able to get this to work, it's broken. Microsoft disabled external group creation in the backend. This disabled external groups across the board though.

Have done this multiple times and it always worked correctly. Have it enabled now for one of my customers without issues. No need to go into Exchange Online. There is a setting in the Yammer admin portal under "security" named:

 

"Enforce your Exchange Online Exchange Transport Rules (ETRs) in Yammer"

 

After enabling that, external messaging was disabled. You do have to reach out to Microsoft support if you want to allow your users to join external groups of other networks. 

That information is not entirely correct. 

In order to disable external messaging in Yammer you require two pieces:

  1.  Enforce your Exchange Online Exchange Transport Rules (ETRs) in Yammer" as per Pooya's comment 
  2. A rule in Exchange online. The rule should look like this:

 

2019-02-03_14-50-52.png

 

Two days after, parameter is still not sync (cf. screenshoot)

 

ETR.png

The Exchange rule (must have one no matters what) as described in official documentation :

https://docs.microsoft.com/en-us/yammer/work-with-external-users/control-external-messaging-with-exc...

 

looks like this :

ExRule.png

 

Hi Federic,

As mentioned in my earlier post, I had issues with this and I called Microsoft to find a resolution. 

The resolution was to create the Exchange rule as per the screenshot included in my earlier post. It seems that the official documentation is not complete. 

Hope this helps and works for you as well, let me know .

Thanks,

Carmen

Thank you Carmen for the precision. I try it now and I'd let you know when it will be updated.

 

CarmensRule.png

 

Kind regards,

Fred

Working fine with your rule Carmen. 

Thank you so much!

ExternalUserPrevented.png

Interesting, because that's not the case for the network I'm looking at right now. We only checked that box and users can't create external groups or add external users to conversations. No need to dive into Exchange and this was also not required for other networks where I updated this setting. Not sure why it's not working for you, but for me it's working exactly the way it has been documented by Microsoft. 

 

Update: just checked the documentation. The Exchange Online part is new. Not sure why they changed it. 

You're right. It needs more tests to validate that the Carmen's rule is responsible of the blocking process. Perhaps it was a coincidence and I should had wait one hour more.
I will test it with 3 tenants : one with the documentation rule, one without rules and one with the carmen's rule.

To be continued....

For tenants in Europe, external groups aren't available!