How to Exclude Internal Teams URLs from Safe Links Scanning
Question details
The user needs to stop Microsoft Teams Safe Links from scanning internal URLs and understand why current exclusion rules are not taking effect.
- Product
- Microsoft Teams
- Device & OS
- not provided
- Scenario
- Managing URL protection and security policies within a Microsoft 365 tenant.
- Observed behavior
- Safe Links continues checking and rewriting internal URLs in Microsoft Teams despite attempts to exclude them in the policy settings.
Ensure you have administrator access to the Microsoft 365 Defender portal, as Safe Links policies require global admin or security admin permissions to view and modify.
Consult the Microsoft Teams Community for Advanced Policy Troubleshooting
Since Safe Links behavior in Teams involves complex backend policies and tenant-specific configurations, Microsoft's official community is the best place for specialized engineering guidance.
Safe Links policies for Microsoft Teams are handled through Microsoft 365 Defender. Occasionally, internal URLs may still be scanned due to policy propagation delays, wildcard syntax errors, or conflicting security rules.
When standard exclusions fail, reaching out directly to Microsoft's specialized engineers can help identify user-specific differences and undocumented URL handling behaviors.
Open your web browser and go to the official Microsoft Teams Tech Community at https://techcommunity.microsoft.com/t5/microsoft-teams/ct-p/MicrosoftTeams.
Click the 'Sign In' button at the top right and log in using your Microsoft 365 administrator or standard account credentials.
Create a new discussion detailing your current Safe Links policy configuration, the exact syntax you used for your internal URLs, and the specific behavior you are observing in Teams.
Verify Safe Links Global Policy Settings
Before reaching out to the community, double-check your Microsoft 365 Defender settings to ensure the URL exclusion list is properly formatted and applied.
Experience a Simpler, Lightweight Office Suite with WPS Office
While dealing with complex Microsoft Teams and Defender security policies can be frustrating, managing your day-to-day documents doesn't have to be. WPS Office provides a lightweight, highly compatible alternative to Microsoft Office, letting you create, edit, and share documents without the overhead of enterprise-level policy configurations.
- 1. Visit the WPS Website: Go to the official WPS Office website to access the free download page.
- 2. Download the Installer: Click the 'Download WPS Office Free' button to get the lightweight installation file.
- 3. Install and Open: Run the installer and start enjoying seamless compatibility with Microsoft Office formats immediately.
Frequently Asked Questions
Why are my internal URLs still being rewritten by Safe Links after adding an exclusion?
Safe Links policies can take up to 24 hours to fully propagate across all users in a tenant. Additionally, syntax errors in your exclusion list (such as missing wildcards) or conflicting policies can cause URLs to still be scanned.
Can I disable Safe Links entirely for Microsoft Teams?
While you can modify the Safe Links policy in the Microsoft 365 Defender portal to exclude Teams by adjusting the protection settings, disabling it entirely is generally not recommended by Microsoft due to the increased risk of phishing and malware.
Where do I configure Safe Links for Teams?
Safe Links policies are configured in the Microsoft 365 Defender portal under 'Policies & rules' > 'Threat policies' > 'Safe Links'. You must have global administrator or security administrator privileges to access and modify these settings.
