Admin and End User forums

For some users, the “Open” menu does not have the option to open a Word document, using the local Offie 365 version of Microsoft Word. Instead, it shows Install Box Tools to open the document and will procede to attempt to download and install Box Tools (which is already installed). For the .docx integration setting, it is set to “select default integrated application”. Is there a way to correct this?

Hello, I have lost access to the email address I use for logging to my box account, I have tried with the provider ( Yahoo ) but the account has definitely been removed and can’t not be recovered and a new email with same address is not available.I can provide another email address or a phone number and I can provide ID to prove my identity and of course I can provide my box account password.I have very sensitive information that is very important for my business in my box session that I need to access.Thanks for your help.Message from Yahoo support : “The Yahoo account [removed by moderator] has been deleted and can’t be restored or reactivated.You can create a new Yahoo account at login.yahoo.com/account/create. For the application that uses this email for two-factor verification, you’ll need to use that application’s account-recovery or support options to update the email or verification method.”

Hi,We use Box for file sharing and are currently conducting a security assessment regarding CVE-2026-111497 (HTTP2Shell / Node2Shell).We would appreciate a written statement from Box regarding the potential impact of this vulnerability. Specifically:1. Does any component of the Box service use Brotli or affected components related to CVE-2026-111497, including Node.js, Bun, Python packages, Envoy, Istio, or .NET?2. If so, is the Box service affected by CVE-2026-111497, and have the necessary security patches or mitigations been applied?3. If remediation was required, has it been completed?4. Has Box identified any indication of exploitation attempts related to this vulnerability against its infrastructure?5. Is any action required from Box customers or end users?A short written response would be appreciated. If Box has published or plans to publish a public security advisory regarding CVE-2026-111497, a link to that advisory would be sufficient.Thank you.

I am the admin of a Business Plus enterprise. A free personal Box account existed on an address at a domain I have since verified in my enterprise. I permanently deleted that personal account today so I could link the address as a secondary email on my admin account, but Link Email still returns "There was an error while trying to add to your account." The deleted user does not appear anywhere in my admin console. Could Box Support release that address from the deleted account so it can be linked? My plan does not show a submit-a-case option, so I am posting here. Happy to provide the addresses in a ticket.

I created a folder for external users to upload file/s via a file request form. I am setting up an automation for this folder using the File Request as a trigger. However, I am not able to select that specific folder. It is not grayed out either - there’s just no radio button to select it. I am able to click on the folder to see what’s inside it, but am not able to select it.I am on Enterprise plan, and i am the owner of the folder - so permissions are not an issue. 

I am adding a user but it gives me an error “invitation available for freemium account holders”. Not sure what to do from there. Any help would be great!

Hello,My account has all of the correct settings ticked to be able to share files with anyone who has access to the share links, however it is still only allowing me to share links with invited people only despite this. I have checked all for my settings and still don't know what I have selected or restricted that isn’t allowing to share links with anyone. I have attached a screenshot of my settings. Please can anyone advise me on why I can only share with ‘invited people only’? I need to share links for works however this is preventing it!Thank you. 

Hi team,  we are currently have the below domain as verified domain and Idp is azure. complispace.com.auNow we need to change everyone’s login to different domain name of “ideagenplc.com” and same time, I need to change from current azure IDP to ideagen’s azure.  please guide me how to do this step by step.  currently Box URL is: https://complispace.account.box.com/

I received a Box invite via email to my secondary email account. I cannot access or even see the shared file, although I added that email address as a user. How do I make this work?

I had two account and deleted one.  I now want to link the two together by adding an e-mail to the remaining one but I keep getting this error.

Hello,I would like our users to be able to register a security key next to their authenticator app for 2FA purposes. Is there an admin setting which allows registering multiple 2FA options or is this limited to only a single method/type?Thank you,Rene

Hello,I’m looking for suggestions on how to best share the details of a Box Shield alert with an affected user.  For instance, if I want to share the details of an anomalous download alert with the user, including the list of folders.  There’s no way to report on it or export the alert, right?Thanks in advance for any help!

Hi, store regulated customer documents in Box and need a written statement from Box Security for our vendor risk file regarding today’s PHP remote code execution vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ). Specifically:Does any component in Box’s service delivery path (upload handling, API, web application) run the PHP runtime (php-src, as opposed to HHVM)?   If so, has it been patched to the versions PHP released on October 21, and when was that completed?   Has Box identified any indication of exploitation attempts against its infrastructure prior to patching?A short written response would be appreciated. If Box has published or will publish a public advisory, a link to that is sufficient for questions 1 and 2. References:https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://www.php.net/archive/2026.php#2026-10-20-1 https:/

We've done some testing to find out if Box AI Home has access to content via shared links. The result suggests that content recently access via shared link can be processed by a Box AI Home event when the user does not have collaborator access to the file.Below are the 4 tests that we performed. In all 4 instances, the user does not have collaborator access to any of the documents When the shared link is set to ‘invited people only’ AI Home cannot find the document When the document does not have a shared link enabled, AI home search does not surface it When a shared link is enabled but I have not accessed the document yet via the shared link, AI Home does not surface it when I search. When a shared link is enabled and I have accessed the document at least once via the shared link, AI Home search returns the document in search Is this behaviour expected and are there situations where content accessed recently via shared links can be included in files processed by Box AI Home?

How do I turn it off.  I bring up a document to reuse for something else.  I edit it and it automatically saves over the original document before I do “save as” for another location

Account Type: Enterprise PlusWe are currently migrating from SharePoint to Box using Shuttle. At around 7TB of files migrated, we received an email referencing the Fair Use Policy.Given that Enterprise Plus offers unlimited data, could you confirm if we might encounter any issues moving forward? We have already migrated 2024 and older data files and are planning to migrate 2025 files. We want to ensure it is safe to proceed despite receiving the Fair Use Policy notice.Thank you for your guidance. Email from Box below Dear Box admin,Thank you for your continued use of Box. We have detected a significant increase in bandwidth use to your account [removed by moderator] that exceeds the bandwidth limitations set forth in our Fair Use Policy (Section 1, article a) and violates the Box Terms of Service.As a result, to prevent abuse and ensure the integrity of the Box Service for all our users, we have implemented preventative measures to limit your bandwidth. We ask that you take the necessa

Just new and learning about box

Can access policies in Azure be created to only allow FedRAMP box accounts and block other accounts?

This link is brokenhttps://ucsf.box.com/s/<removedinformation>

Hi everyone,I have a question about Box permissions.I am an external user who receives access to Box content from multiple clients. I do not manage the Box environments or permission settings myself. I am simply the recipient of access that has been granted by different clients.Because multiple clients have shared content with the account I use, I can see folders and files from several different clients when I log in.My understanding is that I can see these folders only because they have been explicitly shared with my account.What I would like to confirm is whether those clients can see each other's content. For example, if both Client A and Client B share folders with the same external user account, can Client A see Client B's folders or files in any way without being explicitly granted access?Or are all folders and files isolated by permissions so that each client can only see the content shared directly with them?Thank you in advance for your help.

External partners can no longer open a Box folder I share with third parties outside my organization through a password-protected shared link. Until recently, they could open the link. Now the link redirects them to our enterprise Island Browser (which they have access to). Any suggestions?

I have a Managed User who has Viewer Uploader permissions for a root folder. However, when the user accesses any subfolder within that root folder, the New + button is grayed out, preventing the user from uploading files.This was not previously an issue for this user. I reviewed the user’s account settings, collaboration permissions, and folder-level permissions, but I can’t find any changes or restrictions that would explain why the upload option is now unavailable to anyone with ‘Viewer Uploader’ permissions.The user needs to upload files to the subfolders. Has anyone experienced this behavior or found another setting that may override Viewer Uploader permissions?