How to Prevent External Sharing of OneDrive and SharePoint Files
Question details
The user needs to know how to stop authorized users from sharing specific OneDrive or SharePoint files with people outside of their organization.

- Product
- Microsoft SharePoint and OneDrive
- Device & OS
- not provided
- Scenario
- Managing file access permissions to ensure sensitive documents in a collaborative Microsoft 365 environment are kept internal.
- Observed behavior
- Restrict external sharing capabilities at the file, library, or site level so that internal users cannot distribute files to external parties.
Ensure you have the necessary permissions to manage access to the file. If you need to change organization-wide or site-wide external sharing policies, you must have SharePoint or Microsoft 365 administrator privileges.
Review and Adjust File-Level Access Permissions
Check who currently has access to your file and adjust their permission levels to reduce the risk of unauthorized distribution.
While file-level permissions can control who accesses a shared file, they might not completely prevent authorized users with edit rights from sharing the file externally if the site policy allows it. However, it is the first critical step in securing your document.
Navigate to OneDrive or SharePoint and locate the file you want to secure.
Click the three dots (More options) next to the file name and select 'Manage access'.
Look through the list of links, users, and groups that currently have access to the file.
Click the dropdown menu next to a user's name or a sharing link to downgrade permissions (e.g., from 'Can edit' to 'Can view') or remove their access entirely by selecting 'Stop sharing'.

Configure Site or Library External Sharing Policies
Work with your Microsoft 365 or SharePoint administrator to restrict external sharing at the organizational or site level.
Securely Manage and Edit Documents with WPS Office
If you are looking for a highly compatible, lightweight, and easy-to-use alternative to Microsoft Office for your document creation needs, WPS Office is an excellent choice. It offers familiar interfaces, seamless migration, and robust local file encryption to keep your data safe.
- 1. Download and Install: Visit the official WPS Office website to download and install the free software on your device.
- 2. Open your Document: Launch WPS Office and open your existing documents, spreadsheets, or presentations without worrying about formatting issues.
- 3. Encrypt for Security: Go to the 'Menu', select 'Document Encryption', and set a password to restrict who can open or edit your sensitive files locally.

Frequently Asked Questions
Can I stop external sharing for just one specific folder in SharePoint?
Yes, site administrators can break permission inheritance for a specific folder and manage its permissions directly. Additionally, administrators can use Microsoft Purview sensitivity labels to prevent external sharing for specific classified folders or files without changing the entire site's policy.
Why is the 'Manage access' option grayed out or missing for my file?
You likely only have 'View' permissions for the file, or the site administrator has restricted permission management to site owners only. You must have 'Full Control' or sufficient 'Edit' permissions to manage access and change sharing links.
Does removing a sharing link revoke access for everyone who used it?
Yes, if you delete a specific sharing link from the 'Manage access' panel, anyone who relied exclusively on that link to view or edit the document will immediately lose access to the file.
How do I know if my file is already shared with external users?
Open the file, click 'Share', and select 'Manage access'. In the list of users, external users will typically have 'Guest' or 'External' listed under or next to their names, depending on your organization's directory settings.




