How to disable external Onedrive for business account on domain PC's?

Question

I have a user who has 2 onedrive for business accounts, how I disable his access to other organization onedrive on my domain computer (not sharing but login in to an external onedrive account)

Answer 1

On a domain device (or any other managed device), you can use GPO or registry keys to control which tenants the user can login to. In your scenarios, it's likely easier to configure the AllowTenantList setting as detailed here: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-syncing-onedrive-accounts-for-only-specific-organizations

Alternatively, you can go the other route and configure BlockTenantList instead (also covered in the article above). In addition, you can also block access to Personal OneDrive accounts via the DisablePersonalSync setting.

Answer 2

Thanks Vasil, I will try it out.