Forum Discussion

deweyblue's avatar
deweyblue
Copper Contributor
Jul 22, 2021

Preventing employees from uploading to personal OneDrive accounts

Hello everyone!

 

I currently wanted to see how an organization would go about blocking the upload of files to a personal OneDrive account. We currently utilize OneDrive Business, however, we do not allow employees to upload data to their personal OneDrive account due to contractual agreements. What suggestions do you have, and how would we go about preventing this?

3 Replies

  • S365shared's avatar
    S365shared
    Copper Contributor
    Try implementing it using Group Policy.

    For alerting, make use of file sharing activities in Cloud app security.
    https://www.technipages.com/onedrive-prevent-users-from-syncing-personal-accounts
    • deweyblue's avatar
      deweyblue
      Copper Contributor

      S365shared Thank you for that. However, we do implement that. How would we prevent them from accessing the website (OneDrive)? 

      • S365shared's avatar
        S365shared
        Copper Contributor
        I don't see any alternative to block the personal OneDrive access. perhaps you could create a policy to block some endpoints of live.com, however it might cause negative impact.

        Refer the following article for more info:
        https://docs.microsoft.com/en-us/onedrive/required-urls-and-ports

        What I would do is to create some data loss prevention policies to prevent sharing data to external file share/cloud services and generate alerts/incidents whenever someone tries to do that.