Home

Prevent File download for all users for all files on OneDrive and Sharepoint

%3CLINGO-SUB%20id%3D%22lingo-sub-1407620%22%20slang%3D%22en-US%22%3EPrevent%20File%20download%20for%20all%20users%20for%20all%20files%20on%20OneDrive%20and%20Sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1407620%22%20slang%3D%22en-US%22%3E%3CP%3EHi!%3C%2FP%3E%3CP%3EIs%20there%20any%20way%20to%20absolutely%20prevent%20download%20of%20files%20from%20SharePoint%20and%20OneDrive%20for%20all%20files%20and%20all%20user%20in%20my%20organization%3F%3C%2FP%3E%3CP%3EActually%2C%20I%20want%20to%20prevent%20any%20local%20work%20or%20local%20data%20store%20on%20my-users's%20computers.%20It%20means%20that%20i%20want%20also%20disable%20the%20%22open%20on%20Desktop%20app%22%20button%2C%20and%20the%20printing%20options.%20All%20the%20work%20is%20done%20via%20the%20browser.%3C%2FP%3E%3CP%3EI%20know%20that%20it%20is%20possible%20per%20file%20or%20per%20library%20on%20SharePoint%2C%20but%20i%20want%20to%20set%20it%20as%20mandatory%20unchangeable%20policy%20for%20all%20my%20users.%3C%2FP%3E%3CP%3EThank%20you!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1407620%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EOneDrive%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3ESharePoint%20Online%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1407717%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20File%20download%20for%20all%20users%20for%20all%20files%20on%20OneDrive%20and%20Sharepoint%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1407717%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F675325%22%20target%3D%22_blank%22%3E%40elad652%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%20the%20way%20to%20achieve%20this%20is%20with%20the%20use%20of%20session%20based%20Conditional%20Access%20policies%20in%20conjunction%20with%20Microsoft%20Cloud%20App%20Security.%20%26nbsp%3BYou%20can%20read%20about%20this%20at%20-%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-session%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Factive-directory%2Fconditional-access%2Fconcept-conditional-access-session%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThis%20may%20mean%20that%20you%20need%20additional%20licensing%20however.%20%26nbsp%3BConditional%20Access%20is%20an%20Azure%20AD%20Premium%20P1%20feature%2C%20and%20MCAS%20can%20be%20purchased%20as%20an%20add%20on%20to%20EM%2BS%20E3%2C%20or%20is%20included%20in%20EM%2BS%20E5%20and%20M365%20E5%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
Occasional Visitor

Hi!

Is there any way to absolutely prevent download of files from SharePoint and OneDrive for all files and all user in my organization?

Actually, I want to prevent any local work or local data store on my-users's computers. It means that i want also disable the "open on Desktop app" button, and the printing options. All the work is done via the browser.

I know that it is possible per file or per library on SharePoint, but i want to set it as mandatory unchangeable policy for all my users.

Thank you!

1 Reply
Highlighted

@elad652 

 

Hi, the way to achieve this is with the use of session based Conditional Access policies in conjunction with Microsoft Cloud App Security.  You can read about this at - https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-acces...

 

This may mean that you need additional licensing however.  Conditional Access is an Azure AD Premium P1 feature, and MCAS can be purchased as an add on to EM+S E3, or is included in EM+S E5 and M365 E5