DLP

Hi sanjay_senapati95! Let's see if we can put you on the right track here. 

Let's start with your point b): to restrict access to OneDrive (and other cloud apps, like Exchange Online, for that matter) you will need to employ https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/. That looks like it's user-based, but don't be fooled. The https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-condition-filters-for-devices option is immensely powerful and will let you include (or exclude) the policy based on device properties (including device ownership). 

Now, I don't really understand what you mean with point a). Could you elaborate?