Forum Discussion

Kalcite's avatar
Kalcite
Copper Contributor
May 12, 2020

Restrict O365 from adding a cloud storage service from another organisations tenant

Hi everyone,

 

To prevent the potential for data exfiltration through a linked but separate cloud service (see picture) Is it possible to prevent users from my organization from adding a cloud service storage (one drive from another organization

0365 tenant assuming they have the necessary credentials to add the service??

 

If this has been asked somewhere my apologies

 

 

2 Replies

  • Kalcite Hello Basil. Yes, it's possible to block third-party storage providers as well as B2B OneDrive sync. There are a couple of options available. See links for more information.

     

    Use Group Policy to control OneDrive sync settings

    https://docs.microsoft.com/en-us/onedrive/use-group-policy

     

    Policy Setting to Prevent B2B Sync

    https://docs.microsoft.com/en-us/onedrive/b2b-sync#policy-setting-to-prevent-b2b-sync

     

    B2B Sync

    https://docs.microsoft.com/en-us/onedrive/b2b-sync

     

    OwaMailboxPolicy (AdditionalStorageProvidersAvailable)

    https://docs.microsoft.com/en-us/powershell/module/exchange/client-access/set-owamailboxpolicy?view=exchange-ps

    *edit* (noticed this is available from the M365 admin portal as well)

     

    You can also block third-party in Teams.

    • Kalcite's avatar
      Kalcite
      Copper Contributor
      Thanks for the response... much appreciated! .. will look into the resources provided

Resources