Microsoft retired the Everyone Except External Users (EEEU) permission from each user’s OneDrive root web and default document library. The automated rollout ran from April 17 through September 30, 2025; the Message Center notice was archived and expired on December 2, 2025. Broad access that depended on EEEU may have disappeared, but explicit permissions on individual files and folders remain.
What Microsoft changed
Message Center announcement MC1013464 says Microsoft removed the EEEU permission claim from two locations in every OneDrive:
- The user’s OneDrive root site (root web)
- The default document library
EEEU is a SharePoint and OneDrive security principal that includes internal users while excluding external users. Microsoft said the setting was discouraged because it could lead to inadvertent data oversharing.
The notice was first published on February 21, 2025 and updated on March 10, 2025. The final update moved the rollout start from April 10 to April 17, 2025. Microsoft said automated detection and removal would continue through September 30, 2025. The announcement is now archived and expired.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors#1 Best Overall
- Easily store and access 2TB to content on the go with the Seagate Portable Drive, a USB external hard drive
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
What access could change
Before removal, an internal user, application or process could discover OneDrive content through the broad EEEU claim when that claim was assigned at the root web or default library. Once the claim was removed, anything relying only on that inherited access could stop working.
| Permission situation | Expected effect |
|---|---|
| Access obtained only through EEEU on the root web or default library | Access may be lost after Microsoft removes the claim. |
| Direct permission on a specific file | Not affected; the direct grant remains. |
| Direct permission on a specific folder | Not affected; the direct grant remains. |
| Folder permission inherited by documents without separate permissions | Continues according to the folder’s explicit sharing settings. |
Microsoft’s announcement specifically says users, processes and apps with direct permissions to particular files or folders are not impacted. The change therefore targets broad inherited exposure, not every sharing relationship in OneDrive.
Rank #2
- High capacity in a small enclosure – The small, lightweight design offers up to 6TB* capacity, making WD Elements portable hard drives the ideal companion for consumers on the go.
- Plug-and-play expandability
- Vast capacities up to 6TB[1] to store your photos, videos, music, important documents and more
- SuperSpeed USB 3.2 Gen 1 (5Gbps)
What administrators need to do
No administrator action was required to trigger the removal; Microsoft performed it automatically. Governance teams should still review dependencies and communicate the change.
1. Identify EEEU-dependent workflows
- Check applications, scripts, integrations and internal processes that read OneDrive content without an explicit file or folder grant.
- Review documentation that describes EEEU as an access method.
- Ask owners of shared libraries and automation to test access using representative accounts and service identities.
2. Replace broad access with explicit grants
For content that must remain available, grant the required people, groups, applications or processes explicit permission on the relevant file or folder. Microsoft’s stated guidance is to grant explicit permissions to specific files and folders rather than rely on a broad EEEU claim.
Free tools Windows power users keep installed
One-click scans. No signup required.
Rank #3
- [Upgraded Version] - This external hard drive features a mirrored logo stripe combined with a striped anti-slip design, and the rounded corners of the casing make it easier to grip. The stripes also have a heat dissipation function, ensuring stable and fast data transfer.
- 【Ultra-thin and quiet】 - The motherboard adopts JMicron 578 noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- 【Ultra-Fast Data Transfers】 - Pairing this external hard drive with JMicron 578 solution USB 3.0 and USB 2.0 interfaces enables blazing-fast data transfer. It boasts theoretical read speeds of up to 125MB/s and write speeds of up to 103MB/s.
- 【Plug and Play】 - With no software to install, just plug it in and the drive is ready to use.The hard disk chip is wrapped with an aluminum anti-interference layer to increase heat dissipation and protect data.
- 【What You Get】 - 1 x Portable Hard Drive, 1 x USB 3.0 Cable, 1 x User Manual, Gift-type shell packaging ,Three-year manufacturer's warranty and free technical support services.
3. Notify users and update procedures
Tell users that a link or workflow based on broad internal access may no longer work, and revise onboarding, sharing and application-runbook documentation. Avoid restoring a similarly broad permission without first assessing who can discover the content.
How OneDrive sharing controls work after the change
Microsoft Support describes OneDrive as private by default. An owner can open a file or folder’s sharing controls and choose an appropriate permission:
Rank #4
- Ultra fast data transfers: the external hard drive works with USB 3.0 thickened copper cable to provide super fast transfer speeds. Theoretical read speed is as high as 110MB/s-133MB/s and write speed is as high as 103MB/s.
- Ultra-thin and quiet: the motherboard adopts a noise-free solution, giving you a quiet working environment. Lightweight and portable size designed to fit in your pocket for easy portability.
- Compatibility: compatible with PS4/xbox one/Windows/Linux/Mac/Android,Stable and fast downloading on game console no difference from fast transmission when using on PC.
- Plug and Play: no software to install, just plug it in and the drive is ready to use. The hard drive chip is wrapped with aluminum anti-interference layer to increase heat dissipation and protect data
- Package Contents: 1* portable hard drive, 1 *USB 3.0 cable, 1*USB to type C adapter，1 *user manual, shell packaging, three-year manufacturer's warranty and free technical support services
- Can edit: recipients can modify the item.
- Can view: recipients can read the item without editing it.
- Can’t download: recipients can view online without a download option where the control is available.
- Remove direct access: removes an explicitly assigned person’s access.
Changing a folder’s sharing permission generally affects documents contained in that folder. A document with its own separate permissions can behave differently, so administrators should inspect item-level sharing when troubleshooting.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.EEEU is not the same as Everyone
“Everyone Except External Users” and “Everyone” are separate security principals. EEEU is intended to include internal users while excluding external users; the separate Everyone principal has different scope and should be audited independently. A Microsoft Q&A discussion provides useful administrative context on the distinction, but it is community guidance rather than a new Message Center commitment.
Best Value
- Easily store and access 1TB to content on the go with the Seagate Portable Drive, a USB external hard drive.Specific uses: Personal
- Designed to work with Windows or Mac computers, this external hard drive makes backup a snap just drag and drop. Reformatting may be required for Mac
- To get set up, connect the portable hard drive to a computer for automatic recognition no software required
- This USB drive provides plug and play simplicity with the included 18 inch USB 3.0 cable
- The available storage capacity may vary.
Removing EEEU does not automatically remove direct permissions, nor does it prove that all broad access has disappeared. Review other groups, sharing links and item-level grants when investigating exposure.
Practical checks for a broken workflow
- Confirm whether the affected user, app or process previously depended on inherited access from the OneDrive root web or default library.
- Check the target file and its parent folders for an explicit permission or sharing link.
- Grant the narrowest required access directly to the correct user, group or application.
- Retest with the same identity and operation used by the workflow.
- Record the owner, scope and reason for the grant, then remove it when the business need ends.
Why Microsoft made the change
Microsoft’s official wording says the change is intended to “prevent inadvertent data oversharing” and that users should grant explicit permissions to specific files and folders. The announcement does not publish a number of affected tenants, files, users or permissions; the stated risk is qualitative rather than a quantified incident rate.
The Bottom Line
EEEU access was removed automatically from OneDrive root sites and default libraries during the April 17–September 30, 2025 rollout. Direct file and folder permissions remain, but any workflow that depended on broad EEEU inheritance must use explicit, least-privilege grants instead.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
