06-23-2017 08:26 AM
06-23-2017 08:26 AM
Has anyone been successful in disabling all sharing for OD4B? The goal is to drive users into other collaborative tools such as SPO or Groups for shared content. I'm wondering if there is a rights configuration that allows a user to manage their content but not share it internally or externally.
06-24-2017 02:51 AM
You can now control sharing on per-site (collection) level so you can disable it completely for ODFB or for some users only. There's a global switch for this under https://admin.onedrive.com/?v=SharingSettings
Lots of other controls are available as well.
06-25-2017 01:44 PM
06-26-2017 01:20 PM - edited 06-26-2017 01:25 PM
Thanks for the collaboration all.
Sounds like there isn't a native control or a way to combine user permissions to prevent internal sharing.
From my testing, clearing 'Allow members to share the site and individual files and folders.' under 'Access Requests Settings' doesn't prevent me from sharing.
Disappointing answer but appreciate everyone's contribution.
06-26-2017 03:08 PM
06-26-2017 03:25 PM - edited 06-26-2017 03:28 PM
We have already discussed in the past the option to remove the ODfB user from the SCA list.
Unfortunately, it looks like this option has several contraindications and hence is not feasible.
I have never tried it by myself, but @Juan Carlos González Martín could explain more...
06-26-2017 10:23 PM
06-28-2017 03:12 PM
06-28-2017 03:32 PM
06-29-2017 11:37 AM
User training and education is a vital component of any deployment but it can't be the only answer, especially if Microsoft OD4B to be seen as having governance advantages over the competition. The lack of full controls over sharing and per-user activation of the tool create a big gap over some competing solutions and over file shares which is the mechanism most organizations use today.
I've added my vote to this topic on UserVoice: https://office365.uservoice.com/forums/264636-general/suggestions/7950375-onedrive-for-business-admi.... Hopefully this will get some attention.
02-20-2020 06:59 PM
@Guy Yardeni - Would it work to:
1. Set ODfB Sharing to "Only people in your organization"
2. Set advanced settings to "Allow or block sharing with people on specific domains"
3. Select "Type of Restriction - Block these domains"
4. List the internal domain and then "Save"
02-25-2020 02:29 PM - edited 02-25-2020 02:31 PM
Adding my 2 cents in here :) There is no way today to disable internal sharing in OneDrive (short of the permission approach discussed above which has many many negative side effects). Disabling the "Members Can Share" settings will still allow the owner of the OneDrive to share content but will prevent other users from sharing their content.
As a principle, we consider the ability to share files and folders to be a core experience of OneDrive and while we can and do build restrictions via integration with things like DLP, we don't have any plan to let you just turn it off via a switch. To my knowledge, no other major cloud storage platform supports this capability (though do feel free to let me know if that has changed or I've missed something!). We have seen in the past that shutting down the ability to share doesn't prevent content from actually being shared, it just shunts it into other mediums (such as attachments) or shadow IT orgs (where the restrictions haven't been put in place). I usually point folks to education & guidance (as mentioned above) combined with using things like the compliance center to help monitor & correct bad behavior as needed.
If that's still not sufficient, the best thing to do is what you've already done which is to create the UserVoice post and gather support to help demonstrate the value of building such a feature in the product.
Senior Program Manager, OneDrive