Skip to main content

Everyone Except External Users (EEEU) Report

The Everyone Except External Users activity report shows administrators which SharePoint sites shared content with the entire organization over the last 28 days. Part of the Data Access Governance reports in SharePoint Advanced Management, it tracks the Everyone except external users group - the built-in group that includes every internal user - and ranks the sites with the highest number of items or groups shared that way. It is the fastest way to spot content quietly exposed to your whole company.
Related Features
Sensitivity Label Snapshot Report, Sharing Links Activity Reports, Site Permissions Across Your Organization

Common Use Cases

  • Copilot readiness: finding content exposed organization-wide before enabling Copilot
  • Catching public team sites: the Site membership scenario finds EEEU sitting in owners, members, or visitors groups
  • Direct-share review: the Specific files scenario finds items shared directly with EEEU
  • Targeting sensitive sites: filtering to Confidential sites with organization-wide sharing
  • Prioritizing remediation: ranking sites by EEEU activity to fix the worst first
  • Admin accountability: each site row names the primary administrator to follow up with

Benefits

  • Find company-wide exposure fast: the quickest way to spot content open to your whole organization
  • Two scenarios: direct item shares and EEEU sitting in site membership
  • Rich site context: sensitivity label, privacy, external sharing, and primary admin per row
  • Filter at creation: by site template, privacy, and sensitivity label
  • Copilot-relevant: shows exactly the content Copilot will surface to any employee who asks
  • Tenant-scale CSV: up to 1 million sites with the administrator’s name and email

How It Works

  • Lives in the SharePoint Admin Center: App Launcher, Admin, SharePoint admin center, Data access governance under Reports, Activity reports, Shared with Everyone except external users, View reports, Create report
  • Tracks the EEEU group: the built-in group of every internal user, with no guests
  • Choose a scenario at creation: Specific files, folders and lists, or Site membership
  • Admin only: only SharePoint administrators can create and view it; site owners and regular users have no access
  • Licensing: the tenant needs either the SharePoint Advanced Management add-on license or a Microsoft 365 Copilot license, which includes Advanced Management
  • Output: an on-screen view of the top 100 sites and a CSV covering up to 1 million sites

Limits and Nuances

  • Two scenarios at creation: choose Specific files, folders and lists, or Site membership; run both for the complete picture
  • Filters: filter by site template, privacy, and sensitivity label when creating the report
  • SharePoint only: OneDrive EEEU data is available through PowerShell, not the admin center
  • 10-report cap: each report may take up to 24 hours to complete and can be re-run only every 24 hours
  • Where, not who: it shows where organization-wide sharing happened, not who clicked the share button; pair it with audit logs when you need the who

Common Questions About the Everyone Except External Users Report

What is the Everyone except external users group?

It is a built-in SharePoint group that includes every internal user in your organization, but no guests. Sharing a file, folder, or site with EEEU effectively publishes it to your whole company – sometimes intentionally, often not. This report shows where that happened in the last 28 days.

What does the report show?

The top sites with the highest number of items or groups shared with EEEU in the last 28 days, with each site’s sensitivity label, privacy setting, external sharing setting, and primary administrator. You pick the scenario at creation: items shared directly with EEEU, or EEEU sitting in site membership.

What license is required to run this report?

You need either the SharePoint Advanced Management add-on license or a Microsoft 365 Copilot license, which includes Advanced Management. Licensing packages change often, so check Microsoft’s official requirements before planning around it.

What is the difference between the two report scenarios?

Specific files, folders and lists catches individual items shared with EEEU. Site membership catches EEEU added to the site owners, members, or visitors groups – which is how public team sites expose everything at once. Run both to get the complete picture.

Does it cover OneDrive?

Not in the admin center – the on-screen report covers SharePoint sites only. OneDrive EEEU data for the last 28 days is available through the SharePoint Online PowerShell module.

How does this report help with Microsoft 365 Copilot readiness?

Content shared with Everyone except external users is exactly the content Copilot will surface to any employee who asks. Before enabling Copilot, this report shows where organization-wide exposure is concentrated, so you can fix the worst sites first instead of discovering them through a Copilot answer.