#EXT# users

Question

Hi,

I too am interested about these #EXT# users. We have some showing up as well and not knowing who asked these users in, or what they are sharing, is a concern. 

I hear that SharePoint and OneDrive are two of the Office 365 modules that can create #EXT# users. What about Skype for Business, or other 365 modules that are out there? I would like to get a handle on where these external users come from so I can address security concerns appropriately.

This brings up another question. It sounds like default sharing permissions are quite open. Are there permission settings for every module, or is it a global setting? If its both, can a global setting lock it down and then use individual module settings to allow for exceptions?

Thanks for your help

Dean Stuckmann

Answer 1

Hi Dean,

You can check the Sharing history in Portal > OneDrive > Site settings > Access requests and invitationsto check Access Request.

Or you can disable end user sharing in Site Settings > Site permissions > Access Request Settingsthen untick Allow members to share the site and individual files and folders. If you just untick the second one, all the access request need to go through Admin.

Also, you can turn on Start recording user and admin activities through the following steps:

1. Go to portal.office.com and sign in with an admin account.
2. Click Security & Compliance.
3. Go to Reports > View reports.

4. Click Office 365 audit log report.

5. Click Start recording user and admin activities.

6. Tick the contents in Sharing and access request activities.

Then you can check who granted the request of an external user.

---

Note: the previous sharing may not be available.

Regards,

Tisky

Answer 2

Hi Dean,

Any update?

Regards,

Tisky

Answer 3

The shares must be coming from OneDrive since we are not utilizing SharePoint at this time. I've turned on the auditing feature to track the share requests but I don't know of any other ways to see what has happened so far or to see who granted the shares to this point.

Thanks for your input.

Dean

Answer 4

Hi Dean,

Could you share some update with us?

Regards,

Tisky

Answer 5

Hi Dean,

Based on your description, your concern is about the external users in Office 365.

External users will be created automatically once you share something through SharePoint Online or OneDrive for Business. About Skype for Business, the answer is no.

External users don’t have any license. As an admin, you can change the permission of the external user in Advanced in the Shared with tab.

You can disable external sharing for tenant and site collections by, following the steps below:

1. From the SharePoint admin center, click sharing.
2. Select one of the following options:

Here is an article for your reference: Manage external sharing for your SharePoint Online environment.

Regards,

Tisky