Microsoft 365 Copilot Content Explorer Shows Too Many Public Files: Fix

If you use the Copilot Content Explorer in Microsoft 365, you might see public files that should not appear in your search results. This happens when Copilot indexes content from SharePoint sites or OneDrive folders that are shared broadly with Everyone or Everyone except external users. The result is a cluttered view that includes files you have no business reason to access. This article explains why Copilot surfaces too many public files and provides the exact steps to restrict its data sources so only relevant content appears.

Why Copilot Content Explorer Shows Too Many Public Files

Copilot Content Explorer displays files based on the permissions granted to the user performing the search. When a SharePoint site or OneDrive folder is shared with the Everyone group, every user in the organization can see those files in Content Explorer results. The root cause is that Copilot indexes content from all SharePoint sites and OneDrive locations that the user has at least read access to, including public-facing sites. If your tenant has many public-facing team sites, communication sites, or shared folders, the Content Explorer will surface all of them, overwhelming the user with irrelevant results.

Copilot does not automatically exclude public content. It respects the permissions model of Microsoft 365. If a file is visible to Everyone, Copilot treats it as relevant for all users. This is by design, but it can be mitigated by restricting the data sources Copilot can access or by changing the sharing settings on the source sites.

Steps to Reduce the Number of Public Files in Copilot Content Explorer

Follow these steps to limit the public files that appear in Copilot Content Explorer. The first method restricts Copilot data sources at the tenant level. The second method addresses individual site permissions.

Method 1: Restrict Copilot Data Sources in the Microsoft 365 Admin Center

1. Open the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with a Global Administrator or SharePoint Administrator account.
2. Navigate to Copilot settings
   In the left navigation, select Settings then Org settings. Under the Services tab, find and click Copilot.
3. Locate the Data sources section
   In the Copilot settings page, scroll down to Data sources for Copilot Content Explorer. Click Edit.
4. Remove public SharePoint sites
   In the list of included sites, uncheck any SharePoint site that is shared with Everyone. You can also add specific sites by typing their URL and clicking Add. Only sites you explicitly add will be indexed.
5. Save changes
   Click Save and wait up to 15 minutes for the changes to propagate. Copilot will no longer index content from the removed sites.

Method 2: Change Sharing Permissions on Public Sites

1. Identify public sites
   In the SharePoint admin center, go to Sites > Active sites. Look for sites where the External sharing setting is set to Anyone or New and existing guests. These sites are likely indexed by Copilot.
2. Review site permissions
   Open the site, click Settings then Site permissions. Check if the Everyone group or Everyone except external users group has access.
3. Remove the Everyone group
   Select the Everyone group entry and click Remove user permissions. Confirm the removal. This action does not affect existing content, but it stops new users from seeing the site in Copilot.
4. Change external sharing settings
   In the site settings, go to Sharing and change the external sharing level to Only people in your organization or lower. This prevents the site from appearing as public to external users.

If Copilot Still Shows Too Many Public Files After the Fix

After applying the above changes, you might still see a high number of public files. Check these additional areas.

Copilot Content Explorer Still Shows Files from Removed Sites

Copilot caches indexed data for up to 24 hours. If you removed a site from the data sources but still see its files, wait for the cache to refresh. You can force a refresh by having the user sign out of Microsoft 365 and sign back in. In the Copilot pane, click the refresh icon if available.

OneDrive Public Folders Appear in Content Explorer

OneDrive folders shared with Everyone also appear in Content Explorer. To stop this, the user who owns the folder must change the sharing link to Specific people. Go to the OneDrive folder, click the share icon, and select Specific people. Remove the Everyone group from the link.

Content Explorer Shows Files from Deleted Sites

Deleted SharePoint sites might still appear in Copilot results if they are in the recycle bin. Empty the first-stage recycle bin and the second-stage recycle bin for the site collection. After deletion, Copilot removes the indexed data within 30 days.

Item	Restrict Data Sources	Change Site Permissions
Description	Controls which SharePoint sites Copilot can index at the tenant level	Removes the Everyone group from specific sites to limit visibility
Scope	Tenant-wide	Per site
Time to apply	15 minutes to propagate	Immediate after permissions change
User impact	All users lose access to removed sites in Content Explorer	Only users who were in the Everyone group lose access
Best for	Large tenants with many public sites	Smaller tenants with a few problematic sites

After restricting data sources or changing permissions, ask users to clear their Copilot cache by signing out of Microsoft 365 and signing back in. You can also use the Copilot Content Explorer filter to narrow results by owner or source while the indexing updates. For ongoing management, review your SharePoint external sharing policies quarterly to prevent new public sites from appearing in Content Explorer.