Prevent OneDrive for business file being copied to personal OneDrive?

%3CLINGO-SUB%20id%3D%22lingo-sub-781882%22%20slang%3D%22en-US%22%3EPrevent%20OneDrive%20for%20business%20file%20being%20copied%20to%20personal%20OneDrive%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-781882%22%20slang%3D%22en-US%22%3E%3CP%3EIs%20there%20any%20way%20to%20monitor%20and%20prevent%20sensitive%20data%20like%20credit%20card%20number%20being%20copied%20from%20OneDrive%20for%20business%20to%20personal%20OneDrive%3F%20That%20is%2C%20user%20logon%20to%20OneDrive%20for%20Business%20and%20then%20logon%20via%20web%20browser%20to%20personal%20OneDrive%20and%20upload%20sensitive%20data%3F%20%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-782030%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20OneDrive%20for%20business%20file%20being%20copied%20to%20personal%20OneDrive%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-782030%22%20slang%3D%22en-US%22%3E%3CP%3EDepends.%20You%20can%20use%20Intune%20MAM%20policies%20to%20control%20which%20apps%20can%20%22share%22%20data%2C%20as%20detailed%20here%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapp-protection-policy%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fapp-protection-policy%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBut%20there's%20nothing%20stopping%20the%20user%20from%20taking%20a%20picture%20of%20the%20screen%20and%20sharing%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-783977%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20OneDrive%20for%20business%20file%20being%20copied%20to%20personal%20OneDrive%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-783977%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F58%22%20target%3D%22_blank%22%3E%40Vasil%20Michev%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20for%20your%20reply%2C%20can%20my%20goals%20be%20achieved%20by%20using%20Data%20Loss%20Prevention%20(DLP)%20as%20we%20don%E2%80%99t%20have%20Intune%20licences%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-784340%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20OneDrive%20for%20business%20file%20being%20copied%20to%20personal%20OneDrive%3F%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-784340%22%20slang%3D%22en-US%22%3E%3CP%3EDLP%20is%20to%20prevent%20information%20being%20shared%20with%20external%20people%2C%20it%20doesn't%20restrict%20internal%20folks%20from%20copying%20it%20in%20any%20form.%20There's%20really%20no%20solution%20that%20can%20100%25%20reliably%20prevent%20a%20person%20that's%20able%20to%20access%20a%20file%20from%20sharing%20it%20or%20content%20within%20it.%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

Is there any way to monitor and prevent sensitive data like credit card number being copied from OneDrive for business to personal OneDrive? That is, user logon to OneDrive for Business and then logon via web browser to personal OneDrive and upload sensitive data?  

3 Replies

Depends. You can use Intune MAM policies to control which apps can "share" data, as detailed here: https://docs.microsoft.com/en-us/intune/app-protection-policy

 

But there's nothing stopping the user from taking a picture of the screen and sharing it.

@Vasil Michev 

Thanks for your reply, can my goals be achieved by using Data Loss Prevention (DLP) as we don’t have Intune licences?

DLP is to prevent information being shared with external people, it doesn't restrict internal folks from copying it in any form. There's really no solution that can 100% reliably prevent a person that's able to access a file from sharing it or content within it.