Please teach me of "All users except external users" of Share point online. With PowerShell or API, Can I get the members of "All users except external users". And I want to remove the one members of "All users except external users".

Please note that “ Everyone except external users ” ( All users except external users ) is a group built into the SharePoint codebase rather than a modifiable object. We cannot modify the membership of “ Everyone except external users ” as it does not actually have memberships. Currently, there is no PowerShell script to get only tenant-wide internal users. As a workaround, you can get the report for all user (including external users) using the " Export Users " feature via Microsoft 365 admin center > Users > Active users > Ellipsis ( More actions ) > Export Users . Then you can filter out the internal users in the exported CSV file, for example, by filtering " User principal name " field. In addition, if you want to control which users can have access to SharePoint Online, consider using Conditional Access Policies to control user access instead. If an Answer is helpful, please click " Accept Answer " and upvote it. **Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. **

how to get member of "All users except external users".

Accepted answer

ChelseaWu-MSFT 6,316 Reputation points

2021-03-12T06:42:58.847+00:00

Please note that “Everyone except external users” (All users except external users) is a group built into the SharePoint codebase rather than a modifiable object.

We cannot modify the membership of “Everyone except external users” as it does not actually have memberships.

Currently, there is no PowerShell script to get only tenant-wide internal users.

As a workaround, you can get the report for all user (including external users) using the "Export Users" feature via Microsoft 365 admin center > Users > Active users > Ellipsis (More actions) > Export Users. Then you can filter out the internal users in the exported CSV file, for example, by filtering "User principal name" field.

In addition, if you want to control which users can have access to SharePoint Online, consider using Conditional Access Policies to control user access instead.

If an Answer is helpful, please click "Accept Answer" and upvote it.
**Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread. **
Please sign in to rate this answer.
tarou chabi 731 Reputation points

2021-03-12T08:27:10.38+00:00

Thanks a lot. Can I check the user of “Everyone except external users” by Get-SpoUser?
Now, I want to know about "Users of Get-SpoUser".
Because, After I ran "Set-SPOUser -Site $Site.URL -LoginName $Admin -IsSiteCollectionAdmin $false", $Admin remains as a member.
Occurs on 2 out of 1000 sites.

I checked.
After the $Admin connects with powershell, I could get $Admin with get-spouser.
Maybe, It is related “Everyone except external users”.

ChelseaWu-MSFT 6,316 Reputation points

2021-03-12T08:58:03.377+00:00

No. Get-SPOUser returns the SharePoint Online user or security group accounts that match a given search criteria. For example, you can get the users in a specific site by running:

Get-SPOUser -Site <SiteURL>

And if this site has granted permission for “Everyone except external users”, you will see it returned as member in the result.

The thing is, although “Everyone except external users” is a built-in domain group that represents “all internal users”, it is better to be considered as one object. It does not have the same function as a SharePoint group, so we will not get a list of users out of it.

Reference: Get-SPOUser.

tarou chabi 731 Reputation points

2021-03-12T13:48:26.177+00:00

After I ran "Set-SPOUser -Site $Site.URL -LoginName $Admin -IsSiteCollectionAdmin $false", $Admin remains as a member. Only 2 sites in 1000 sites.
Do you know why? I want to remove admin from list.

And this admin user isn't showing up in the user gui "https://***-my.sharepoint.com/personal/**** /_layouts/15/people.aspx?MembershipGroupId=0".
So, I can't ask the user to remove the admin.

Get-SPOUser -Site https://***-my.sharepoint.com/personal/ **** -LoginName admin@**** | fl

DisplayName : Admin
LoginName : admin@ ****
IsSiteAdmin : False
IsGroup : False
Groups : {}
UserType : Member

ChelseaWu-MSFT 6,316 Reputation points

2021-03-15T07:07:18.053+00:00

To answer your questions:

The command Set-SPOUser -Site $Site.URL -LoginName $Admin -IsSiteCollectionAdmin $false is used to remove the user $Admin from the Site Collection Administrators list. It does not remove the user from the site. To remove a user from the site and also from the user information list, use the following command instead: Remove-SPOUser -Site $Site.URL -LoginName $Admin
References: Set-SPOUser. / Remove-SPOUser.

The site URL you refer to https://-my.sharepoint.com/personal/* is the link to user’s personal OneDrive site.
This is the default outcome when you run this command on global administrators, it does not necessarily mean the user has access to the site.

ChelseaWu-MSFT 6,316 Reputation points

2021-03-15T07:08:38.443+00:00

If you cannot find the Admin account in the site user information list, then there is no need to remove it.

tarou chabi 731 Reputation points

2021-03-16T00:30:11.333+00:00

Why is “Everyone except external users” added without user operation?

ChelseaWu-MSFT 6,316 Reputation points

2021-03-16T05:56:10.29+00:00

Referring to a MVP’s reply in another post here, it is probably a remnant from previous version of SharePoint where we had the "shared with everyone" folder, which can still be provisioned via the ProvisionSharedWithEveryoneFolder switch.

Per my test, this remnant has been removed from newly created tenants, which removes the default permissions for both “Every” and “Everyone except external users”.

ChelseaWu-MSFT 6,316 Reputation points

2021-03-19T09:44:21.437+00:00

Hi @tarou chabi , do you have any progress on this thread? Please feel free to let us know if you need further assistance.

ChelseaWu-MSFT 6,316 Reputation points

2021-04-01T01:29:08.61+00:00

Hi @tarou chabi , I’m checking on how things are going on with this thread. If you find an Answer helpful, please remember to accept it as answer.

If you manage to solve the problem yourself, please share your solution as a new Answer in this thread and accept it as answer.

It will help others who meet similar questions in this forum. Thank you for your understanding.

tarou chabi 731 Reputation points

2021-04-02T10:06:58.727+00:00

Sorry for the late reply.

Referring to a MVP’s reply in another post here, it is probably a remnant from previous version of SharePoint where we had the "shared with everyone" folder, which can still be provisioned via the ProvisionSharedWithEveryoneFolder switch.

…………
Can I set this setting with a command?

ChelseaWu-MSFT 6,316 Reputation points

2021-04-05T04:32:53.58+00:00

I’m afraid not. Provisioning of the SharedWithEveryone Folder within OneDrive for Business is no longer supported, so we cannot set this setting using PowerShell command any more.

tarou chabi 731 Reputation points

2021-04-05T13:24:12.657+00:00

Thanks alot. I understood. Thank you very much.
Sign in to comment

how to get member of "All users except external users".

0 additional answers