Preventing employees from uploading to personal OneDrive accounts

Copper Contributor

Hello everyone!

 

I currently wanted to see how an organization would go about blocking the upload of files to a personal OneDrive account. We currently utilize OneDrive Business, however, we do not allow employees to upload data to their personal OneDrive account due to contractual agreements. What suggestions do you have, and how would we go about preventing this?

3 Replies
Try implementing it using Group Policy.

For alerting, make use of file sharing activities in Cloud app security.
https://www.technipages.com/onedrive-prevent-users-from-syncing-personal-accounts

@S365shared Thank you for that. However, we do implement that. How would we prevent them from accessing the website (OneDrive)? 

I don't see any alternative to block the personal OneDrive access. perhaps you could create a policy to block some endpoints of live.com, however it might cause negative impact.

Refer the following article for more info:
https://docs.microsoft.com/en-us/onedrive/required-urls-and-ports

What I would do is to create some data loss prevention policies to prevent sharing data to external file share/cloud services and generate alerts/incidents whenever someone tries to do that.