Skip to main content

TEAMS.TC.5004 - Citrix files Integration Should Be Disabled

Description​

This test checks if Citrix files integration is disabled in Microsoft Teams to prevent data exfiltration.

Policy Statement​

Contoso's company policy requires all third-party cloud storage services, including Citrix files, to be disabled in Teams to maintain control over corporate data.

Why This Matters​

Allowing third-party storage integrations in Teams creates several risks:

Data Exfiltration​

  • Users can upload corporate data to external storage services
  • Data may be stored outside organizational control
  • Difficult to monitor and audit data transfers
  • Potential for data leaks through third-party services

Compliance Risks​

  • May violate data residency requirements
  • Third-party services may not meet compliance standards
  • Difficult to enforce retention policies on external storage
  • Could breach contractual obligations about data storage

Security Concerns​

  • Third-party services may have different security standards
  • Increased attack surface
  • Potential for unauthorized access
  • Loss of DLP protection when data leaves Microsoft 365

How to Fix​

Disable via Teams Admin Center​

  1. Navigate to Teams Admin Center - Client Configuration
  2. Scroll to Files section
  3. Set Citrix files to Off
  4. Click Save

Disable via PowerShell​

# Disable Citrix ShareFile integration (PowerShell property is AllowShareFile)
Set-CsTeamsClientConfiguration -AllowShareFile $false

Verify Current Setting​

# Check current configuration
Get-CsTeamsClientConfiguration | Select-Object AllowShareFile

# Should return:
# AllowShareFile
# --------------
# False

Check All Third-Party Storage Settings​

# Review all third-party storage options
Get-CsTeamsClientConfiguration | Select-Object AllowDropBox, AllowBox, AllowGoogleDrive, AllowShareFile, AllowEgnyte

# Recommended secure configuration (all disabled):
# AllowDropBox      : False
# AllowBox          : False
# AllowGoogleDrive  : False
# AllowShareFile    : False
# AllowEgnyte       : False

Impact Assessment​

Before Disabling​

Consider:

  • Are any teams currently using Citrix files integration?
  • Is there business justification for third-party storage?
  • What is the migration plan for existing data?
  • Have users been notified of the change?

After Disabling​

Users will:

  • No longer see Citrix files as a file sharing option in Teams
  • Need to use OneDrive/SharePoint for file storage
  • Require alternative methods to access Citrix ShareFile files

Organization gains:

  • Better control over corporate data
  • Improved compliance posture
  • Reduced data exfiltration risk
  • Centralized data governance

Approved Storage Solutions​

Instead of third-party storage, use Microsoft-approved solutions:

OneDrive for Business​

  • Personal file storage
  • Full DLP protection
  • Audit logging
  • Compliance integration

SharePoint Online​

  • Team file storage
  • Advanced permissions
  • Retention policies
  • eDiscovery support

Teams Files​

  • Channel-based storage (backed by SharePoint)
  • Automatic collaboration
  • Integrated with Teams chat
  • Version control

Learn More​