MS Teams - Remove Download and Sync options

[JSLIM]

Hi All,

Would like to check if there is anyway to set as default to remove the Download and Sync Options for all TEAMS Created which is linked to Sharepoint?

User is able to use the TEAMS created (example: Project1 Teams) with the following rules in place:

1) User able to view all files inside

2) User able to upload files

3) User is able to open the document using Desktop App (Word, Excel, PPT), edit and save (Without Downloading)

4) User is not able to click on the "Download" button

5) User is not able to sync the TEAMS file folder to the desktop

I did some search and found out that I am able to hide the SYNC button.

https://sharepointmaven.com/how-to-disable-sync-in-sharepoint-and-onedrive/ 

Did further research on point 4, saw some mentioning using Conditional Access Policy, I have not tried it before and wonder if any experts have some guidance for this?

https://techcommunity.microsoft.com/t5/azure-active-directory-identity/conditional-access-8220-limit...

How do I achieve point 4? Are there any licenses I will need to add-on?

Thanks in advance for reading and helping!

Cheers!

[#2]

@JSLIMwell the best way will be to give it a try for the 1st url that you find out https://sharepointmaven.com/how-to-disable-sync-in-sharepoint-and-onedrive/  since the second one conditional access is not going to fulfill what you are trying to achieve here.

[#3]

@JSLIM 

You were almost there (managing it from SPO\OD4B) as Teams are relying on those service for 1:1 chat and Teams Channel file sharing.

One of the thing you can consider are:

• Control who can create Teams and Channel or lay a process where in only select Help desk can create Teams\Channel
  • https://docs.microsoft.com/en-us/microsoft-365/admin/create-groups/manage-creation-of-groups?view=o3...
• By then the help desk can facilitate request by adding granular settings below

  • Block Download or Offline Availability in SPO\OD4B

    File Level

    • https://techcommunity.microsoft.com/t5/microsoft-onedrive-blog/onedrive-message-center-update-novemb...

    Site Level for  SPO\OD4B

    • https://support.microsoft.com/en-us/office/prevent-users-from-downloading-content-from-a-site-98821e... (Site Collection - SPO)
    • https://answers.microsoft.com/en-us/msoffice/forum/all/use-onedrive-for-business-in-online-mode-only... (Personal Site - OD4B)
    • Additional instruction to access Library Settings: OneDrive Site > Return to Classic OneDrive (Lower Left) > Click the Gear icon > Show Ribbons

    Client Level (Restrict Sync using NGSC)

    • https://docs.microsoft.com/en-us/onedrive/allow-syncing-only-on-specific-domains (best for Local Workgroup or non-domain joined machine)

There's some loophole on this that I can't recall as of the moment or maybe part of them are not applicable but feel free to mention me back in case.

Also some promising note here:

https://onedrive.uservoice.com/forums/913531-onedrive-sharing-collaboration/suggestions/7105024-prev...

--------------------------------------------------------------------------------

Note: I do this on my free time to help foster the cloud community. Please also mark my response accordingly.

BFN

[#4]

@JSLIM While it may be possible to hide the download button, item 3 will also result in the file being downloaded to the local computer in a temp folder. By default, it will also be possible for a user to email the attachment, which is effectively downloading it.

My experience it that a lot of enterprises want to "lock down" O365 capabilities, but that is not how O365 is designed. It is normally to fully lock down a lot of capabilities, as there is almost always a work-around for someone who is determined.

I'm not advising you to not attempt this, just understand that this may be difficult to completely accomplish without stripping O365's collaboration capabilities, possibly making it virtually unusable.

Good luck.