Guest access expiration vs Entitlement Management
What happens if you: Set the 'Guest access to a site or OneDrive will expire automatically' setting in the SharePoint admin center to 90 days. Grant a guest access to a SharePoint site for 180 days through an Entitlement Management access package. Does the guest expiration policy kick in at 90 days regardless?
Guests cannot download files shared with OneDrive (conditional access policies)
We have enabled 'Allow limited, web-only access' for unmanaged devices in Sharepoint (https://docs.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices?redirectSourcePath=%252farticle%252f5ae550c4-bd20-4257-847b-5c20fb053622). I thought that this setting is linked with conditional access policies but it seems to be applied for all guest users. This setting creates 2 conditional access policies. I changed the user assignments to exclude guests. This doesn't work. Is there an option to exclude guests so they can download shared files to an unmanaged device? We block downloading files from OneDrive and Sharepoint on non hybrid AD joined devices. We only want to do this for internal users. If we share with external users, it is the responsability of the guest to keep de downloaded documents safe.
Guest Access - Restrict Guest Access / Governance
We are trying to implement governance around Guest Access in Office 365 and few questions: 1. How do we restrict permission to users to add Guests to entire tenant and also site collection specific? 2. How do we track permission given to Guest Accounts? Is there are tool, Power Shell or way to do it? 3. Is there a way to notify the business users to remove guests access on recurring basis? 4. Can we provide Guest access based on the classified site categories? For example - High Classification site will have guest access disabled, whereas Low Classification sites will have the guest access enabled. 5. Are there any invalid AD policies that can be done? Or Are there DLP policies that can be done? or possibly is there any OOB policies that we can enable.