Forum Discussion
Stop onedrive personal connecting to onedrive for business
Hi
Apologies if this has already been asked but:
Is there a way to stop someone signing into their onedrive for business account using the personal onedrive app?
Scenario
I am working with a company that want to their staff to use OneDrive but only on corporate machines.
Can staff download the free onedrive app on say a personal machine and then sign into their work account and sync this.
If so can this be disabled?
Regards
Wasim
If that's the case then you can use Conditional access since these are unmanaged devices to control access. You need to have Azure AD Premium and Intune for this, and you may visit the links below for more details:
7 Replies
You can also block them setting up a OneDrive personal account within OneDrive sync client. On each machine, set the following in the registry (can be done via OneDrive GPO)
[HKEY_CURRENT_USER\Software\Microsoft\OneDrive] "DisablePersonalSync"=dword:00000001
hi,
In our organization we have disabled the Personal One drive access and can only access the Organization One drive. Presently we are able to access Personal Online Excel/PPT/Word documents etc...Wanted to know how can we restrict this as well...
- May i know, how the Personal OneDrive access was disabled? I am trying to find a way to restrict Onedrive.live.com from accessing, blocking the onedrive.live.com URL dint worked.
Another option to explore is Conditional Access Policies - https://blogs.technet.microsoft.com/wbaer/2017/02/17/conditional-access-policies-with-sharepoint-online-and-onedrive-for-business/
Location-based policies don't require Azure AD Premium licences
"These policies ensure content can only be access when someone is connected to the defined network, denying access outside of that boundary – whether the content is access via a browser, application, or mobile app."
You can limit OneDrive for Business file sync to domain joined PCs only using these methods: via OneDrive Admin Center or PowerShell.
Thanks for the response.
What if there isnt a domain in place.
The company do not currently have a domain/AD set up. Just standalone machines with local user accounts set up on it.
Regards
Wasim
If that's the case then you can use Conditional access since these are unmanaged devices to control access. You need to have Azure AD Premium and Intune for this, and you may visit the links below for more details:
