Skip to content
← Back to the guide

How to restrict external sharing for a SharePoint site

8slides. Screenshot a slide, download it as a PNG, or use your browser's Print → Save as PDF for a LinkedIn-ready multi-page carousel — each slide becomes one page.

M
solvingmicrosoft365.com
1 / 8

How to restrict external sharing for a SharePoint site

How to restrict external sharing for a SharePoint site: tenant vs site levels, the four sharing settings, default link type, guest expiration, removing guests.

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 1Download PNG
M
solvingmicrosoft365.com
2 / 8
01

Why can't I set a site to allow more sharing than the tenant?

Site sharing settings can only be as permissive as the tenant-level setting, never more. If the tenant is set to 'Existing guests only', no site can allow 'Anyone' links. Set the tenant to the most permissive level any…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 2Download PNG
M
solvingmicrosoft365.com
3 / 8
02

Does restricting sharing on a site remove the guests who already have access?

No. Changing the site's sharing setting affects new sharing only. Existing guests keep their access and existing sharing links keep working until you remove them — via the site's Site permissions page, the Access reques…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 3Download PNG
M
solvingmicrosoft365.com
4 / 8
03

What is the difference between 'Anyone' links and 'New and existing guests'?

'Anyone' links work for whoever holds the URL, with no sign-in — convenient, unauditable, and the source of most exposures. 'New and existing guests' requires the recipient to sign in (or verify a one-time code), creati…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 4Download PNG
M
solvingmicrosoft365.com
5 / 8
04

Step 1: Set the tenant ceiling (once)

SharePoint admin center → Policies → Sharing. For most organisations: SharePoint = New and existing guests, OneDrive = New and existing guests or Existing guests. Under More external sharing settings: Limit external sha…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 5Download PNG
M
solvingmicrosoft365.com
6 / 8
05

Step 2: Restrict the site

SharePoint admin center → Sites → Active sites → the site → Settings (or the Sharing tab) → External sharing. Choose Only people in your organization for internal-only sites, or Existing guests for a site that should ke…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 6Download PNG
M
solvingmicrosoft365.com
7 / 8
06

Step 3: Tighten the site's link defaults

Same page: Default sharing link type → Specific people, Default link permission → View. Even on a site that allows guests, these defaults stop the "I'll just send a link" reflex from producing organisation-wide edit lin…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 7Download PNG
M
solvingmicrosoft365.com
8 / 8
07

Step 4: Remove existing external access

From the site: Settings (gear) → Site permissions → (three dots) Manage access / External users lists guests with access; remove those who should not have it. For sharing links, run the sharing report: Site settings → S…

Solving Microsoft 365 · www.solvingmicrosoft365.com/guides/how-to-restrict-external-sharing-for-a-sharepoint-site

Slide 8Download PNG

Auto-generated from How to restrict external sharing for a SharePoint site. This page is not indexed and isn't part of the guide itself.