Teams External Chat File Sharing Turns On, Even If You Blocked It

#SimpleSharepoint #MicrosoftTeams #Microsoft365 #ExternalSharing #TeamsAdmin #OneDrive #DataGovernance #Oversharing #M365Admins

Default Policy Changes, PowerShell Management, and External Collaboration Controls

Microsoft is updating default collaboration settings in Microsoft Teams to enable external file sharing in 1:1 and group federated chats.

Rolling out between late October and late November 2026, Teams external chat file sharing will be enabled by default across all Microsoft 365 tenants. Senders can attach or drag and drop files directly into chats with participants outside their organization, and Teams will grant file permissions automatically. Crucially, this default update applies even to tenants that previously disabled file sharing in external chats, overriding legacy policy choices.

File Storage and Underpinning Security Controls

While the default setting enables frictionless file transfers, existing tenant security boundaries remain in effect:

• OneDrive storage: Shared files reside in the sender’s personal OneDrive for Business account within a designated Teams Chat Files folder.
• Underpinning policies: Global SharePoint, OneDrive, and Purview sensitivity label policies continue to govern file access and prevent unauthorized external leakage.
• Permission customization: Senders retain the ability to adjust access settings (e.g., view-only or specific recipient limits) prior to sending files.

PowerShell Mitigation Steps for IT Administrators

If enabling external chat file transfers conflicts with your organization’s data loss prevention (DLP) or compliance requirements, tenant administrators must reapply restrictions using PowerShell:

• Block external file sharing: Execute Set-CsTeamsFilesPolicy with -FileSharingInChatsWithExternalUsers Disabled to prevent users from attaching files in federated chats.
• Disable automatic permissions: If you want users to share links manually without automated permission grants, set -AutoShareFilesInExternalChats Disabled within your Teams messaging policy.
• Review tenant controls: Audit your tenant-level OneDrive and SharePoint external sharing boundaries alongside Purview sensitivity label enforcement.

How our team helps secure your tenant:

• Policy Audit & Remediation: We monitor tenant updates, reapply overwritten administrative configurations, and maintain strict data governance standards.
• Security & DLP Review: We evaluate your overall OneDrive, SharePoint, and Microsoft Purview setup to prevent accidental external oversharing.

Settings that quietly reset can create security exposure that only surfaces during an audit. Partner with our team to safeguard your collaboration environment before the default rollout finishes.