Can you be a bit more specific as to what you configured? You need to create a new settings object using the Group.Unified.Guest template and assign it to the group(s) in question. Once the setting is configured, it only affects client applications such as Teams or OWA, it will not prevent changes done via the admin interfaces.
Alternatively, you can achieve the same via Sensitivity labels.