External Sharing via Office 365 OneDrive

[Warwick_Tech]

Hi All,

So we have inevitably got to the point where suddenly users are discovering how wonderful cloud services are (who would've thought, right?)

 

So now a few exam boards and invigilators are asking for files to be shared with them over the cloud (This is great for assessment based subjects to be fair)

 

The issue is I have a locked down legacy SharePoint and OneDrive where our data was all 'on-site'

 

Does anyone have any guidance on how I can allow external party sharing without opening a whole can of worms? I know you can add agreed domains and such, things like auto expiry of links -

 

the only thing I've found so far is a 'permissive slider' which seems a bit loose in my opinion.

 

 

Anyone want to share their policies? Am I the only one who is this paranoid RE locking down data?

[ozydave]

Interested here as well

[CyBeRkId2002]

Is that in the OneDrive admin centre? I believe you get additional options in the Sharepoint admin centre, one of which being only allowing certain groups to be able to share externally (this applies to both OneDrive and Sharepoint)

[Warwick_Tech]

Is that in the OneDrive admin centre? I believe you get additional options in the Sharepoint admin centre, one of which being only allowing certain groups to be able to share externally (this applies to both OneDrive and Sharepoint)

 

Yes, it seems you can change options in both and it applies the same; however Teams access is in a different place (of course)

 

Reading through this guide I was able to decipher that when you slide the bars up, it gives you the additional options you mentioned; however in order to get more restriction options, you set everything to anonymous (?)

 

Seems a little backwards to me...

 

https://sharegate.com/blog/ultimate-guide-deal-with-office-365-external-sharing

 

What policies do others apply?

 

I'm tempted to:

 

* Allow anonymous Access (to enable the advanced options)

* Restrict to whitelist domains (Though this could get complicated and require a lot of admin)

* Auto disable links after a week or so

 

This seems like a sensible DP plan

[KK20]

We allow sharing of external data in onedrive but not in sharepoint/teams. Sharepoint/teams has the "school data" and I dont want someone sharing the whole pyramid. Onedrive is personally controlled so someone can share a link externally. Links expire in 14 days. Staff also understand how prevent downloading with the links for files but not folders - not perfect but does work somewhat.

[Warwick_Tech]

We allow sharing of external data in onedrive but not in sharepoint/teams. Sharepoint/teams has the "school data" and I dont want someone sharing the whole pyramid. Onedrive is personally controlled so someone can share a link externally. Links expire in 14 days. Staff also understand how prevent downloading with the links for files but not folders - not perfect but does work somewhat.

 

Would you mind sharing your settings for this? I cannot seem to loosen Onedrive without making sharepoint accessible too (as you say, it's better the other way around)

[KK20]

I cannot remember where I set this up. I seem to believe it was teams that let me restrict it. But it could also have been a setting in Azure. It was some time ago and I didnt document it. Here is my sharepoint at the top, onedrive at the bottom. The sharepoint "anyone" only says that it has been restricted, it doesnt really give a clue.

 

Edited March 29, 2021 by KK20

[Warwick_Tech]

Could you PM me with the settings you have on these two admin centres? (no worries if not, or if you're happy to share here)

https://admin.onedrive.com/?v=SharingSettings

 

[O365Tenant]-admin.sharepoint.com/_layouts/15/online/AdminHome.aspx#/sharing

Edited March 29, 2021 by Warwick_Tech

[KK20]

sure

[KK20]

it should be noted that yes I am in the staff group! Pupils cannot share externally from onedrive (I should have said earlier that I locked external onedrive sharing only to staff). I am almost positive that I got the external sharing from shareppoint locked down from either teams or azure. I suspect it might be the teams guest external sharing that locks it off (irrespective of whether it is a teams sharepoint or sharepoint site. Edited March 29, 2021 by KK20

[KK20]

Found it for you:

 

You can limit site sharing to specific domains by allowing or blocking domains for the site.

 

To limit site sharing by domain

 

In the SharePoint admin center, under Sites, click Active sites.

 

Click the site that you want to configure.

 

On the Policies tab, under External sharing click Edit.

 

Under Advanced settings for external sharing, select the Limit sharing by domain.

 

Add the domains that you want to allow or block, and then click Save.

 

Click Save.

 

That will sort it out.