Temporarily disable access to OneDrive for Business

%3CLINGO-SUB%20id%3D%22lingo-sub-1271634%22%20slang%3D%22en-US%22%3ETemporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1271634%22%20slang%3D%22en-US%22%3E%3CP%3EHi%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20would%20have%20a%20need%20to%20temporarily%20disable%20access%20to%20OneDrive%20for%20Business%20for%20selected%20existing%20users.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20would%20need%20to%3C%2FP%3E%3CUL%3E%3CLI%3EDisable%20access%20from%20any%20device%20to%20OneDrive%20for%20Business%3C%2FLI%3E%3CLI%3EWe%20dont%20want%20to%20loose%20any%20files%20from%20users%20ODfB%3C%2FLI%3E%3CLI%3EWe%20need%20to%20be%20able%20to%20re-enable%20access%20later%20on%3C%2FLI%3E%3C%2FUL%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1271634%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1272246%22%20slang%3D%22en-US%22%3ERe%3A%20Temporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1272246%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20only%20thing%20that%20comes%20to%20mind%20is%20to%20create%20a%20Conditional%20access%20policy%20that%20prevents%20access%20for%20just%20those%20users.%20As%20ODFB%20doesn't%20enforce%20licensing%20requirements%20in%20code%2C%20removing%20the%20license%20will%20have%20no%20effect%2C%20and%20the%20other%20options%20cannot%20be%20scoped%20to%20a%20single%20user%2Fgroup%20of%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1272480%22%20slang%3D%22en-US%22%3ERe%3A%20Temporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1272480%22%20slang%3D%22en-US%22%3EWhat%20about%20removing%20the%20users%20as%20%22Admins%22%20in%20their%20ODFBs%3F%20What%20about%20also%20to%20stop%20ODFB%20Client%20Sync%20by%20means%20of%20a%20Group%20policy%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1274006%22%20slang%3D%22en-US%22%3ERe%3A%20Temporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1274006%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F60%22%20target%3D%22_blank%22%3E%40Juan%20Carlos%20Gonz%C3%A1lez%20Mart%C3%ADn%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDo%20you%20mean%20by%20removing%20Site%20Collection%20Owner%20permission%20via%20Sharepoint%20User%20Profiles%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1274087%22%20slang%3D%22en-US%22%3ERe%3A%20Temporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1274087%22%20slang%3D%22en-US%22%3EYep%20or%20simply%20by%20means%20of%20a%20PS%20Script%20that%20do%20that%20task%20ODFB%20by%20ODFB%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1274982%22%20slang%3D%22en-US%22%3ERe%3A%20Temporarily%20disable%20access%20to%20OneDrive%20for%20Business%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1274982%22%20slang%3D%22en-US%22%3EProblem%20here%20is%20that%20when%20I%20remove%20user%20from%20users%20personal%20site%20admins%2C%20next%20time%20user%20logins%20to%20OneDrive%2C%20user%20gets%20his%2Fher's%20permission%20back.%20I%20tested%20this..%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi

 

We would have a need to temporarily disable access to OneDrive for Business for selected existing users.

 

We would need to

  • Disable access from any device to OneDrive for Business
  • We dont want to loose any files from users ODfB
  • We need to be able to re-enable access later on

 

5 Replies
Highlighted

The only thing that comes to mind is to create a Conditional access policy that prevents access for just those users. As ODFB doesn't enforce licensing requirements in code, removing the license will have no effect, and the other options cannot be scoped to a single user/group of users.

Highlighted
What about removing the users as "Admins" in their ODFBs? What about also to stop ODFB Client Sync by means of a Group policy?
Highlighted

@Juan Carlos González Martín 

 

Do you mean by removing Site Collection Owner permission via Sharepoint User Profiles?

Highlighted
Yep or simply by means of a PS Script that do that task ODFB by ODFB
Highlighted
Problem here is that when I remove user from users personal site admins, next time user logins to OneDrive, user gets his/her's permission back. I tested this..