How to prevent users from saving data on local drive exept one place

Question

The goad is to force a user to save data only in the OneDrive folder within their profile folder. E.g. "C:\Users\username\OneDrive - CompanyName"

This is the only place where they should be allowed to save data.

I've tried the below GPO, but it only prevented the user from saving files on the root of the specified drive, but allowed him to create a folder and save files inside it.

User Configuration > Administrative Templates > Windows Components > File Explorer > Prevent access to drives from My Computer

Is there a way to do it?

Answer 1

Hello

Yes, there are a few ways to restrict users from saving data on local drives except for a specific location like the OneDrive folder. Here are some methods you can consider:

 

File System Security Settings: Another approach is to use the File System security settings in Group Policy. You can add the paths you want to restrict (like C:\Users\username\Documents, C:\Users\username\Desktop, etc.) and then specify the permissions. This method can be more granular and restrictive.

 

Intune Policies: If you’re using Microsoft Intune, you can create policies to prevent users from saving files on local drives. This method can be quite comprehensive as it allows you to hide and disable all items on the desktop, and prevent users from accessing the content of selected drives.

 

Registry Changes: Although not recommended due to the potential for system instability, you can make changes to the Windows Registry to restrict access to certain locations.

 

[Prevent Users To Save Files On Local Drives Desktop Using Intune MEM Policies HTMD Blog [ceb2-be57-612-bbe6] (anoopcnair.com)](https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.anoopcnair.com%2Fprevent-users-to-save-files-on-drives-intune%2F&data=05%7C02%7Cwesleyl%40wicresoft.com%7Ca6c40604611c470fb64a08dc6de87ea3%7Cb2ae8dd9097749768706861b488b1512%7C0%7C0%7C638506092556142717%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C&sdata=RveKTwkIOKXqW9erwQpaF%2Bs1wmJz%2BNgYt%2FlZYz7Dd7o%3D&reserved=0"原始 URL: https://www.anoopcnair.com/prevent-users-to-save-files-on-drives-intune/。如果你信任此链接, 请单击或点击。")