Sharepoint and Onedrive block all uploads

Question

Hello team,

I am trying to block all the uploads to Sharepoint and Onedrive.

I blocked the OneDrive Sync using the sync option with on-prem GUID to random value, which means, no one can sync OneDrive app.

Then, If the end-user can only upload files using browser: How can I block the upload for all in OneDrive/Sharepoint?

If the end-user try to share the file using teams apps, will this block the upload to OneDrive?

The objective is block all uploads.

I was thinking on Defender for Cloud apps, however, this will block only in Browser, meaning that from desktop app teams he may able to upload.

I am testing endpoint DLP, however, do you have any good idea to accomplish this?

Answer 1

Hi @Sergio Londono ,

Sorry, I am a SharePoint engineer and I don't know much about DLP. You can study it further. I also suggest you add Purview tags to make it easier for Purview engineers to see.

From the SharePoint perspective, there is no good way at present. You can use block the OneDrive Sync using the sync option with on-prem GUID to random value and Defender for Cloud apps in combination.

For your references:

https://learn.microsoft.com/en-us/sharepoint/control-access-from-unmanaged-devices#it-admins---sharepoint-and-onedrive-unmanaged-device-access-controls

https://learn.microsoft.com/en-us/sharepoint/block-file-types#block-syncing-of-specific-file-types

https://learn.microsoft.com/en-us/microsoftteams/block-access-sharepoint

---

If the answer is helpful, please click "Accept as Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.