We have remote workers with unmanaged(BYOD) devices who use Office 365 webapps and now we want to configure OneDrive in such a way that users should not be able to download files on their local personal PC.
Using the Outlook web app policies we already restricted the mail attachment downloads and now all mai attachments can only be saved to OneDrive.
Using conditional access we have restricted the download of files from OneDrive to local PC but with that the Move & copy option is also disabled.
Problem is that all user attachments are saved in 1 single "attachment" folder and they are unable to copy or move it to a different folder.
Is there a way we can disable the download option in OneDrive but keep the Move/copy option active for users to move files within their OneDrive account.