diff --git a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md index c5e5621f8..50072dd68 100644 --- a/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md +++ b/sharepoint/sharepoint-ps/Microsoft.Online.SharePoint.PowerShell/Set-SPOTenant.md @@ -8,7 +8,7 @@ schema: 2.0.0 author: samkabue ms.author: speedta ms.reviewer: Mengke-GH -description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings. ' +description: 'A PowerShell cmdlet used in SharePoint Online to configure organization-wide tenant settings.' ms.date: 03/04/2026 --- @@ -276,6 +276,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -406,6 +408,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -534,6 +538,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] [-RestrictResourceAccountAccess ] [-RestrictExternalSharingForAgents ] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -663,6 +669,8 @@ Set-SPOTenant [-MinCompatibilityLevel ] [-MaxCompatibilityLevel ] -RestrictExternalSharing [-AddAppIdToList] [-RemoveAppIdFromList] [-AllowFileArchive ] [-AllowFileArchiveByDefault ] [] [-EnableNotificationsSubscriptions ] + [-IsFilePreviewDomainRestrictionEnabled ] + [-FilePreviewAllowedDomainList ] [-DisableTeamsMeetingRecordingDeletedNotification ] ``` @@ -890,6 +898,14 @@ Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $true -FilePreviewAllowedDo This example restricts file preview to the specified domains. When domain restriction is enabled, only files embedded from the listed domains can be previewed, in addition to predefined trusted Microsoft domains (for example, teams.microsoft.com). +### EXAMPLE 27 + +```powershell +Set-SPOTenant -IsFilePreviewDomainRestrictionEnabled $false +``` + +This example disables the file preview domain restriction. The previously configured allow list is retained but ignored, so the file preview viewer can load content from any domain. + ## PARAMETERS ### -AIBuilderModelScope @@ -3553,8 +3569,13 @@ Accept wildcard characters: False ### -FilePreviewAllowedDomainList -Specifies the list of domains that are allowed for file preview. -Use a comma-delimited list of domain names. For example: `contoso.com,fabrikam.com`. +> Applicable: SharePoint Online + +Specifies a list of domains that the file preview viewer is allowed to load content from when rendering previews (PDF, images, Office, documents, and other supported file types). Use the comma character as the delimiter for entering multiple values. For example, `"contoso.com,fabrikam.com"`. + +When the restriction is disabled, the list is retained but ignored, and the file preview viewer can load content from any domain. When the restriction is enabled, if this parameter is not specified, a predefined set of allowed domains (such as `teams.microsoft.com`) is used. If it is specified, the provided domains are appended to the default set and do not replace it. + +Domain entries must be fully qualified domain names (for example, `contoso.com`) and are provided as a comma-separated list. Each entry is trimmed and empty values are ignored. The bare wildcard `*` is not allowed. Wildcards are only permitted in the left-most label as `*.contoso.com`. Invalid wildcard patterns (for example, `contoso.*` or `a*b.com`) are rejected. Duplicate entries are removed using case-sensitive comparison. The list can contain up to 500 domains. ```yaml Type: String @@ -3823,9 +3844,11 @@ Accept wildcard characters: False ### -IsFilePreviewDomainRestrictionEnabled -Enables or disables domain-based restrictions for file preview. +> Applicable: SharePoint Online + +Enables or disables enforcement of the file preview domain allow list defined by `FilePreviewAllowedDomainList`. -When set to `$true`, SharePoint restricts file preview to the domains specified in `-FilePreviewAllowedDomainList`. When set to `$false`, domain restrictions are disabled and file preview is allowed for all domains, regardless of the allow list configuration. This setting affects the embedded preview experiences. +The values are `$true` and `$false`. The default value is `$false`, which means the restriction is disabled and the file preview viewer can load content from any domain. PARAMVALUE: True | False @@ -5357,7 +5380,7 @@ Accept wildcard characters: False > Applicable: SharePoint Online -Sets the sensitiviy label for a site. +Sets the sensitivity label for a site. ```yaml Type: String