Anonymous Links Expiry
This policy sets an expiration date for anonymous sharing links, limiting how long external users can access shared content. Expiring links after a defined period reduces the risk of unauthorized access and helps maintain control over shared resources.
Settings this baseline controls
| Setting | What it does |
|---|---|
| Anonymous link expiry in days | Specifies the number of days before anonymous links expire. The value must be at least 0, and no more than 730. Learn more |
Configure it
This baseline makes “Anyone” links in SharePoint and OneDrive expire after 90 days. It applies to the whole tenant.
-
Add the baseline to the tenant (Adding a baseline), or deploy it to many tenants at once as part of a scheme (Deploying a scheme).
-
Set Anonymous link expiry in days to
90. Every “Anyone” link the tenant creates from then on stops working automatically after 90 days. The value can be anywhere from 0 to 730, but 90 is what this baseline requires. -
The expiry only takes effect where the tenant’s sharing policy allows Anyone links; if it doesn’t, there’s nothing for an expiry to apply to (see Global Default Sharing Policy).
-
Save. Turn on Auto-remediation and Octiga puts the expiry back to 90 days automatically if it’s changed or removed in Microsoft 365.
Check it worked
Passing means SharePoint Online’s anonymous link expiry reports 90. Check it in the
SharePoint admin centre, under
Policies → Sharing → Advanced settings for “Anyone” links → Link expiration. Users notice
nothing when they create a new “Anyone” link; it stops working 90 days later without further
warning.
Standards this addresses
Doing this for every tenant?
Step through the deploy wizard to apply a scheme to a tenant, groups or users, and see what Managed and Direct do at deploy time.