4 min read · Beginner · Related: Microsoft 365 for Business

Updated October 2026 · Tampa Bay–tested steps

Sharing OneDrive Links? Stop Oversharing in 5 Minutes

'Anyone with the link' is forever — scoped links, expiry dates, and the audit that finds every open door.

  1. 1. Change the default link type

    SharePoint admin → Policies → Sharing: default to 'People with existing access' instead of 'Anyone'. Every future share starts closed instead of open — the single highest-leverage 365 setting most tenants never touch.

  2. 2. Audit what's already open

    Run an access review: SharePoint admin → Reports → Sharing, and expire every Anyone-link older than 30 days. You'll find payroll sheets and contracts open to the internet — everyone does.

  3. 3. Use expiring, scoped links going forward

    Share with Specific people, View-only unless editing is needed, and set expiry dates on external links. 'Anyone, forever, can edit' should require a conscious decision, not be the default.

Sharing OneDrive Links? Stop Oversharing in 5 Minutes — When to Call a Pro

  • Sensitive data was shared externally — incident review plus DLP policies.
  • You need guest access done right: time-limited, audited, revocable.
  • Compliance (HIPAA, financial, legal) demands provable sharing controls.
Get help with this(813) 702-3155

Guide FAQ

Existing links keep working until expired or revoked — you're changing defaults and auditing, not pulling rugs. Communicate the new norms once.
Specific-people links with View-only and a 30-day expiry. The recipient verifies identity, access dies automatically, and you have an audit trail.
Was this guide helpful?

Keep going on Microsoft 365 for Business

Turn On MFA in Microsoft 365 First5 min readSwitching From Google to Microsoft 3657 min readOneDrive Says Storage Full? Fix It Without Paying4 min read

Related service: Microsoft 365 for Business →