| Service | Microsoft Docs article | Related commit history on GitHub | Change details |
|---|---|---|---|
| SharePoint | Turn External Sharing On Or Off | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/turn-external-sharing-on-or-off.md | Previously updated : 05/23/2024 Last updated : 06/24/2024 Title: Manage sharing settings for SharePoint and OneDrive in Microsoft 365 ---+++ recommendations: true audience: Admin f1.keywords: CSH This video shows how the settings on the <a href="https://go.microsoft.com/fwlin 1. Go to <a href="https://go.microsoft.com/fwlink/?linkid=2185222" target="_blank">**Sharing** in the SharePoint admin center</a>, and sign in with an account that has [admin permissions](./sharepoint-admin-role.md) for your organization. -2. Under **External sharing**, specify your sharing level for SharePoint and OneDrive. The default level for both is **Anyone**. +1. Under **External sharing**, specify your sharing level for SharePoint and OneDrive. The default level for both is **Anyone**. - > [!NOTE] - > The SharePoint setting applies to all site types, including those connected to Microsoft 365 groups and teams. Groups and Teams guest sharing settings also affect connected SharePoint sites. - > - > The OneDrive setting can be more restrictive than the SharePoint setting, but not more permissive. --  +> [!NOTE] + > The SharePoint setting applies to all site types, including those connected to Microsoft 365 groups and teams. Groups and Teams guest sharing settings also affect connected SharePoint sites. + > + > The OneDrive setting can be more restrictive than the SharePoint setting, but not more permissive. - This setting is for your organization overall. Each site has its own sharing setting that you can set independently, though it must be at the same or more restrictive setting as the organization. See [Change the external sharing setting for a site](change-external-sharing-site.md) for more information. + + +This setting is for your organization overall. Each site has its own sharing setting that you can set independently, though it must be at the same or more restrictive setting as the organization. See [Change the external sharing setting for a site](change-external-sharing-site.md) for more information. > [!IMPORTANT] > [Microsoft Entra external collaboration settings](/azure/active-directory/external-identities/external-collaboration-settings-configure) determine who can invite guests in your organization for site sharing (always) and file and folder sharing (if Azure B2B collaboration is enabled). Be sure to review Microsoft Entra guest access settings as part of your SharePoint and OneDrive sharing setup. This video shows how the settings on the <a href="https://go.microsoft.com/fwlin ### More external sharing settings - - **Limit external sharing by domain** This is useful if you want to limit sharing with particular partners, or help prevent sharing with people at certain organizations. The organization-level setting on this page affects all SharePoint sites and each user's OneDrive. To use this setting, list the domains (maximum of 5000) in the box, using the format *domain.com*. To list multiple domains, press Enter after adding each domain. You can also limit external sharing by domain by using the [Set-SPOTenant](/powe For info about this setting, see [Manage security groups](./manage-security-groups.md). -**Guests must sign in using the same account to which sharing invitations are sent** --By default, guests can receive an invitation at one account but sign in with a different account. After they redeem the invitation, it can't be used with any other account. This setting only applies to sharing that doesn't use Microsoft Entra B2B collaboration. - **Allow guests to share items they don't own** By default, guests must have full control permission to share items externally. If people who use a verification code have selected to "stay signed in" in the b Choose the option you want to show by default when a user creates a sharing link. - + > [!NOTE] > This setting specifies the default for your organization, but you can choose a different default link type for a site. Choose the option you want to show by default when a user creates a sharing link ### Advanced settings for **Anyone** links - + **Link expiration** - You can require all **Anyone** links to expire, and specify the maximum number of days allowed. If you change the expiration time, existing links will keep their current expiration time if the new setting is longer, or be updated to the new setting if the new setting is shorter. If you are using file requests, the link permissions must be set for **View and ## Other settings - + **Show owners the names of people who viewed their files in OneDrive** This setting lets you control whether the owner of a shared file can see on the This setting lets you specify whether site owners can allow users who have access to a file, page, or news post to see on the file card who has viewed the item. - + This setting is turned on by default at the organization level and off at the site level for existing sites. Viewer information is shown only when the setting is on at both the organization and site level. We recommend that site owners turn on this feature only on team sites that don't have sensitive information. [Learn how site owners can turn on this feature](https://support.office.com/article/ee26dde0-c30e-4eca-b1c3-38922c450967). |
| SharePoint | Use Group Policy | https://github.com/MicrosoftDocs/OfficeDocs-SharePoint/commits/public/SharePoint/SharePointOnline/use-group-policy.md | This article describes the OneDrive Group Policy objects (GPOs) that administrat 1. Install the OneDrive sync app for Windows. (For information on the builds that are being released, and on the download builds, see [release notes](https://support.office.com/article/845dcf18-f921-435e-bf28-4e24b95e5fc0?).) Installing the sync app downloads the .adml and .admx files. -2. Browse to `%localappdata%\Microsoft\OneDrive\\*BuildNumber*\adm\` (for [per-machine sync app](per-machine-installation.md) browse to `%ProgramFiles(x86)%\Microsoft OneDrive\BuildNumber\adm\` or `%ProgramFiles%\Microsoft OneDrive\BuildNumber\adm\` (depending on the OS architecture)) to the subfolder for your language, as necessary (where *BuildNumber* is the number displayed in sync app settings under the **About** tab). +1. Browse to `%localappdata%\Microsoft\OneDrive\\*BuildNumber*\adm\` (for [per-machine sync app](per-machine-installation.md) browse to `%ProgramFiles(x86)%\Microsoft OneDrive\BuildNumber\adm\` or `%ProgramFiles%\Microsoft OneDrive\BuildNumber\adm\` (depending on the OS architecture)) to the subfolder for your language, as necessary (where *BuildNumber* is the number displayed in sync app settings under the **About** tab). -+ 3. Copy the .adml and .admx files. 4. Paste the .admx file in your domain's Central Store, `\\\\*domain*\sysvol\domain\Policies\PolicyDefinitions` (where *domain* is your domain name, such as corp.contoso.com), and the .adml file in the appropriate language subfolder, such as en-us. If the PolicyDefinitions folder doesn't exist, see [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759), or use your local policy store under `%windir%\policydefinitions`. The OneDrive GPOs work by setting registry keys on the computers in your domain. - (EnableAutomaticUploadBandwidthManagement) [Enable automatic upload bandwidth management for OneDrive](use-group-policy.md#enable-automatic-upload-bandwidth-management-for-onedrive) +- (EnableAutoStart) [Start OneDrive automatically when signing in to Windows](use-group-policy.md#always-start-onedrive automatically-when-signing-in-to-windows) + - (EnableHoldTheFile) [Allow users to choose how to handle Office file sync conflicts](use-group-policy.md#allow-users-to-choose-how-to-handle-office-file-sync-conflicts) - (EnableODIgnoreFolderListFromGPO) [Exclude specific kinds of folders from being uploaded](use-group-policy.md#exclude-specific-kinds-of-folders-from-being-uploaded) Enabling this policy sets the following registry key value to 1: `[HKLM\Software\Policies\Microsoft\OneDrive]"EnableAutomaticUploadBandwidthManagement"=dword:00000001` +### Always start OneDrive automatically when signing in to Windows ++<a name="EnableAutoStart"> </a> ++This policy overrides the user's choice, ensuring OneDrive will automatically start every time they sign in to Windows. ++Enabling this policy sets the following registry key value to 1: +++``` +[HKCU\Software\Policies\Microsoft\OneDrive]"EnableAutoStart"=dword:00000001 +``` + ### Enable sync health reporting for OneDrive <a name="EnableSyncAdminReports"> </a> -This setting lets the OneDrive sync app report sync device and health data included in administrative sync reports. +This policy lets the OneDrive sync app report sync device and health data included in administrative sync reports. If you enable this setting, the OneDrive sync app will report device and health data to include in administrative sync reports. You must enable this setting on the devices you want to get reports from. |