I have stumbled upon a problem when managing file access permissions in my company via OneDrive/SharePoint.
Let's say I create a SharePoint site for our projects, and I give access to such site to UserA, which is authorized to view such files. UserA syncs SharePoint with its computer locally, and opens a file. Such file is now downloaded and stored in the local computer, inside a local folder created by the OS when syncing.
UserA is no longer authorized to see such files, so I remove him from the SharePoint site. After a few minutes, UserA is no longer allowed to download any files from his local SharePoint folder, as he normally would. However, he has already downloaded some files since he has edited them. These files will no longer receive updates or sync with the server, but he can still see the local version. I want to prevent that.
I thought files automatically downloaded from OneDrive to the OS when editing them had a 'user account' attribute, and they tried to auth in the server before enabling the content. This means it would be downloaded for quick access with no need to download the file again, but it would still try to check if you had authorization to see such file.
Moreover, the whole directory hierarchy and filenames are downloaded to the system by default, so it would still be able to see all the filenames and directories that were inside the SharePoint at the moment he was removed. The same thing happens with OneDrive shared folders.
Is there any way I can negate access from UserA to the SharePoint files in his local computer?
I thought I could negate access to the local folder via his domain user, but that is not automatic, and I would rather have the SharePoint folder removed from the computer, having it automatically free disk space, or requiring auth before opening a file.
Thanks in advance,
Josep Sendra,
System Admin at Verin Control