Restricting external access to SharePoint

[WaterRide]

Many of our users have access to Office 365 / SharePoint but the way it is currently configured staff are able to access everything they have been given permission to outside the corporate network.  Any one here use SharePoint in business?  If so, what have you done to block all (or limit) external access to Office 365 for members of designated groups.

TIA

 

[Rkiver]

Back in the day when sharepoint was something installed inside the network that was simple to do.

 

Office 365 is cloud based, and to the best of my knowledge, what you ask is not possible. Perhaps ask a Microsoft specialist who sold your company the Office365 license?

[phlakvest]

Are you running ADFS to integrate your users with Active Directory?  If so you can restrict access to the ADFS proxy to restrict authentication to lock down all O365 external access.

To only restrict Sharepoint Online to a subset of IPs you can try the Set-SPOTenant Cmdlet.

https://technet.microsoft.com/en-us/library/dn917455.aspx

I haven't tested it but based off the article, it will work.

[wh1t3 and n3rdy]

We allow users external access to Sharepoint but they still have to authenticate to log in and still can only see what permissions allow their user account to see? Are they seeing stuff they shouldn't or do you only want them to access it from you internal network? Will they have a VPN to connect to you LAN in order to access Sharepoint?

[roberth]

Why would you want to stop the people from accessing SharePoint online from outside the network? Isn't that working against why you're using Office 365 in the first place?

Anyway, like phlakvest said, you should be able to set it with Set-SPOTenant -IPAddressAllowList <YourIP>.