External
25 TopicsAdd external user to a Microsoft Team unable to do this
I have created a new Microsoft Teams using the admin center:- where a new sharepoint site has been created and its external sharing setting will be as follow:- so now i want to share the MS Teams with external users to allow them to use the sharepoint site which got created and other Teams components. now i went to the office 365 >> i tried to share the office 365 group with external user using his gmail account, but i got this error:- also i went to the MS Team >> Add Members, but i got this error:- similarly i tried adding the external user from sharepoint >> site permission >> Invite people >> "add members to group" :- but i got this error:- the only thing i can do is to share the sharepoint site itself with external users,, but i can not add external to office 365 or MS teams .. so can anyone advice on this? seems there is a sharing settings for office 365/MS Team i am missing??74KViews0likes30CommentsCan't connect to external meetings from the Teams Calendar, but can from Outlook
I am getting reports from many of my users across my organization that when they try and join a Teams meeting hosted by an external third party (such as a vendor, partner, or customer), that the meeting never connects if they click Join from the Teams calendar. However, if they go to the same meeting request in Outlook, they are able to join via the web link. Is there any particular reason my users cannot join a Teams meeting being hosted by an outside resource directly within Teams? All of our users have been migrated to Office 365 and Exchange Online, and Teams works pretty much flawlessly otherwise. RESOLVED - It was Mimecast causing the issue, we simply added a https://infosec.force.com/ISIcommunity/s/article/Mimecast-Whitelisting#url for teams.microsoft.com to Mimecast, so did not put a mimecast.com security URL in its place.Solved34KViews0likes3CommentsHow can we know which email address the external user used to register inside the office 365
From time to time we received many emails from external users that they received the following error when they try to sign-in to our sharepoint sites:- but when i check their usernames i can see that they are already registered as guest accounts + they are added inside some sharepoint groups (which we shared with them). based on my reading, that this problem can happen if the external user register with an account different from the account we shared the sites with. for example i might share a site with new external user using his ***@gmail.com but when the user receive the invitation email, he might used his **@hotmail.com account. now for us to be able to identify if this is the case, then how we can know which account the user used to register inside our tenant. For example when i access Office 365 admin >> Users >> Guests >> i will get the external user account as follow "externalemail_gmail.com#EXT#@ourtenant.com",, so can we be sure that the user used his gmail account to access our tenant? or the above email externalemail_gmail.com refer to the email which the invitation was sent to (regardless if this email was used to register)?25KViews0likes10CommentsWhy cant i share files in an external chat?
I am the admin for our company, and we allow external chats without issues. Where we are having problems, is we cannot share any files/images with those external users, and there is no setting i can find to allow this? This seems like an extremely basic feature to exclude. If i had the option to quickly change between accounts/companies i would do that, but Teams doesnt allow that either...18KViews0likes1CommentNew user unable to search for external contacts
Hi all! We have a weird issue with one of our users in Teams. She is unable to do external lookup of users. Everyone else in my Org is able to do so. User has Microsoft 365 E5 license The Tenant is set to Teams only and we have compaired the user to others that are working without luck. Can anyone help me out?13KViews1like5CommentsUsers cannot see [External] tag in OWA and Outlook Conversation View
There are multiple ways to add [External] tag to emails received from outside the organization. O365 users can use the Native [External] tag in Office 365. You can apply [External] tag using transport rule in Exchange and Office 365. You can also set up [External] tag using rules in your third-party gateway. Exchange Team has already covered the first two options in their blog Native external sender callouts on email in Outlook. In this post I just wanted to talk about an intermittent issue where [External] tags behave differently for different emails. For example, You have 2 emails with [External] tag in the subject. When you reply to the first email you see the tag replaced with RE: and when you reply to the second email the tag is appended with RE: [EXTERNAL]. When you enable conversation view in Outlook or OWA you don’t see the [External] tag in the message preview for some emails, while it still shows for some other emails. But when you double click on either of the two emails the tag can be seen in the Subject line. The underlying cause for the issue lies in the MAPI properties of the email and the mechanism used to add the tag. There is one major difference between the Conversation View and Normal View. In normal view, the message preview displays the value in the MAPI property PR_SUBJECT. However, when we see the email in conversation view the message preview displays another MAPI property “PR_CONVERSATION_TOPIC” and that’s why in most cases you will not see the external tag. You can check these properties using MFC MAPI. In OWA, Conversation View is set by default, and you won’t see External tag in the message preview. You can click on Settings and change the view. A message store provider has the option of assuring that “PR_CONVERSATION_TOPIC” property is always set on incoming or outgoing messages. If these properties are already set, they should not be altered. If not, they can be set to PR_NORMALIZED_SUBJECT. So “PR_CONVERSATION_TOPIC” gets the value from “PR_NORMALIZED_SUBJECT” Now let’s find why is the value in “PR_NORMALIZED_SUBJECT” and PR_SUBJECT different? First Scenario: If the PR_SUBJECT_PREFIX is present and is an initial substring of PR_SUBJECT. In that case PR_NORMALIZED_SUBJECT and associated properties are set to the contents of PR_SUBJECT with the prefix removed. For First Scenario it is straight forward, as the PR_SUBJECT_PREFIX property was set explicitly, the string can be of any length and use any alphanumeric characters, but it must match a substring at the beginning of the PR_SUBJECT property. Here “External” will be removed from Subject when setting the value for “PR_NORMALIZED_SUBJECT” PR_SUBJECT_PREFIX is External: PR_SUBJECT is External: This is an Important Email PR_NORMALIZED_SUBJECT is This is an Important Email PR_CONVERSATION_TOPIC is This is an Important Email If this is the case with an email, it will not display External tag in message preview and when you reply to this email it will change the tag from External: to Re: Second Scenario: If the PR_SUBJECT_PREFIX is present, but it is not an initial substring of PR_SUBJECT, PR_SUBJECT_PREFIX is deleted and recalculated from PR_SUBJECT. Third Scenario: If PR_SUBJECT_PREFIX is not present, it is calculated from PR_SUBJECT In Second and Third Scenario, the property PR_SUBJECT_PREFIX is not set or needs to be recalculated. The rule for computing the prefix is that PR_SUBJECT must begin with one, two, or three letters (alphabetic only) followed by a colon and a space. If such a substring is found at the beginning of PR_SUBJECT, it is then added to PR_SUBJECT_PREFIX. Otherwise, PR_SUBJECT_PREFIX property remains unset. By design if store must calculate or recalculate the value of PR_SUBJECT_PREFIX then it will fail to calculate [External] as it is more than 3 alphabets long. This means PR_SUBJECT_PREFIX property will remain unset PR_SUBJECT_PREFIX is PR_SUBJECT is External: This is an Important Email PR_NORMALIZED_SUBJECT is External: This is an Important Email PR_CONVERSATION_TOPIC is External: This is an Important Email If this is the case with an email, it will display External tag in message preview because it is now the subject itself and when you reply to this email it will change the tag from External: to RE: [EXTERNAL]. Now that you understand when and why will you experience this problem you can circle back to tagging rule to fix this. You can check the protocol logs to find why the two emails were processed differently. This can happen either due to conflicting rule or if the tagging rule modifies Thread-Topic and Subject headers differently.9.1KViews0likes0CommentsTeams guest invitation emails pose serious (information leakage) risks
Teams guest/external user invitation emails pose serious (information leakage) risks, without sharing minimal unique identification details for an inviting party. When you invite, or get invited as guest/external user, an (teams service) email invitation is sent out. Because this message contains no unique identifiable details on the inviting party, an invitee has no clue who/where an invite comes from and as such if an invite comes from a known/trusted party/person. The message header contains a full name (John Do), while the message body only contains a first name (John). The message is received from ‘Microsoft Teams noreply @ email.teams.microsoft.com ’, which of course is a trusted service…, but no clue who/which John Do is asking. Without any unique identifiable information, no one should ever select the ‘Join Teams’ link. From a security/phishing perspective this message shouldn’t even arrive in a user’s mailbox. Other (social) platforms share at least (a) unique additional detail(s) for the requestor, for better or worse on which you could base an decision to accept or deny. From an organizational perspective you might even consider which (personal) identification details to share, while (receiving) inviting a guest, and/or even what minimal information is required before allowing a message to arrive in a mailbox Once you have guest member(s) for a team, you should be able to (re)identify, each user and guest uniquely, meaning that minimal identification details should included in the ‘member’ cart, instead of John Do (External), and/or multiple John Do’s etc.. Specifically in a world where users have/bear multiple identities, as well as multiple users share first/last/full names, like John Do, you should be able to easily and at all times identify members uniquely. Scenario’s: Contoso Organization John Do John Do from the Contoso organization invites johndo @ hotmail.com and johndo @ outlook,.com to become Teams (guest) member. Each (Microsoft account) John Do receives an invitation with subject ‘You have been added as a guest to Contoso in Microsoft Teams’ and from ‘Microsoft Teams noreply @ email.teams.microsoft.com .’ In the body John (only shared details is first name) could be John working at Contoso. Ok, so this is a trusted company, but no clue what I could share with whoever is John. Of course this can be validated once accepted, but should I… Now John Do at Contoso needs to start an external chat with johdo @ live.com . Another John with a Microsoft account. While typing in the To: line ‘johndo @ live.com’, an action shows “Search johndo @ live.com externally’. You are required to select the action, with a result to select from 2 johndo @ live.com (External). One with an “Skype” icon as well as ‘johndo’ the other without anything additional. Selecting one of these John Do’s allows for sending a chat message. In the background the (Skype) John Do ends up no where … (could be something related to my config/testing). Selecting the other (blank) John Do, is received in Teams (personal) chat. Though here the inviting user is identified as Unknow User and hovering over shows ‘Unknow User is using Teams with an account managed by an organization. Some features… ‘). Also this could be related to my configuration???. Block or Accept? Guess what, you can’t accept. Optionally you can select “Preview Message”. This shows the initial chat (message), as well that it comes from John Do. Probably the 'Unknown User' from 'an organization'. Microsoft account John Do Using Teams (personal) on Windows 11, (Microsoft account) John Do is initiating a chat with johndo @ contoso.com . Contoso John will receive an email from ‘Microsoft Teams noreply @ email.teams.microsoft.com ’ with subject ‘John Do invited you to Microsoft Teams’ and in the messagebody that John (first name only) invited you with a link 'Join Teams'. The link contains probably a unique reference, , obfuscated for this scenario, and looks like https://teams.live.com/l/invite/XXXXXXXXXXXX_f6AwI?v=e1 . Again not something you can't/shouldn't accept. From a conversation point of view Even if you would except all these requests, it then becomes hard or even impossible to clearly identify/differentiate among each John Do, beacuse they all rollup as John Do in the conversations. Even withing an organization multiple John Do’s easily exist. Hovering over (members) makes them identifiable, but it would be great to optionally change their ‘display name’ or anything else to uniquely. For external John Do’s they seem all endup as John Do (External).Solved9.1KViews0likes3CommentsAdd Site Link to External Users myapplications.microsoft.com
Hi, I'm wanting to add a simple Site Link to the myapplications.microsoft.com landing site for External Users. When an external user accepts an invitation the process ends with them reaching https://myapplications.microsoft.com/ which is just a mostly blank page. Is there a way to pre-populate the page with link to the Site that the external user has access to? Or I'd even settle for changing the landing page the external user ends on. Is that possible and how?8.4KViews1like8CommentsDownload highest quality of Stream video
I was wondering if anyone has seen this behavior before. When watching a Stream video (a recording of a meeting) in the browser, the quality is great and there is no lag between audio and video. However, when I try to download the video, the quality of the downloaded version appears to be worse than the browser version's quality. The only reason that this is especially frustrating is that Stream does not yet support external sharing of videos, so a video that we have made for some external partners must be downloaded and shared. The quality of the downloaded video does not look great and is not up to the quality that we would want to share with external users. To my understanding, videos in Stream are transcoded into several different quality formats, so is there any way to export the highest quality encoded version?No external communication with Teams when SipProxyAddress is missing?
Hi, I am a little bit confused. I have a customer where external communication (with other O365 tenants) worked without problems. Since a few weeks most of the users are not able to do this. When you want to send a message to a user of the customer Teams says "mailadress not found" (i dont know the exactly sentence in english because i just know it in german). I find out that these users do not have the attribute SipProxyAddress in Azure AD. Some users of the customers have, most of them does not have it anymore. I can add a SIP: entry in proxyaddresses on prem to get this done or enable the skype for business online license. But how is it supposed to be right now? Was there a change that every Teams users needs a Skype for Business Online license to get a SipProxyAddress to communicate externally? Kind regards Patrick5.7KViews0likes5Comments