Use Group Policy to control Lists sync settings

This article describes the Group Policy objects (GPOs) for Microsoft Lists (and SharePoint lists) that administrators can configure by using Group Policy. Use the registry key information to confirm that a setting is enabled. Lists sync policies are listed under OneDrive because Lists sync gets packaged, installed, and updated through the OneDrive sync app's existing update mechanism. For information about controlling OneDrive sync settings by Group Policy, see OneDrive policies.

List of policies by string ID

Prevent Lists sync from running on this device

By default, Lists sync is turned on for users of Microsoft Lists, which allows users to access and edit their lists even when offline. If you enable this policy, Lists sync will be blocked from running on the device.

Prevent Lists sync from running on the device:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive] "DisableNucleusSync" = "dword:1"

Re-enable Lists sync on the device:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive] "DisableNucleusSync" = "dword:0"

Prevent users from syncing lists shared from other organizations

Enabling this setting prevents users at your organization from syncing lists that are shared from other organizations. After the setting is enabled (by entering value 1) on a computer, lists shared from other organizations won't sync. Disable the setting (by entering value 0) to allow your users to sync external lists.

Prevent external List sync with:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive] "BlockExternalListSync" = "dword:1

Restore external List sync with:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive] "BlockExternalListSync" = "dword:0"

Prevent users from getting silently signed in to offline experiences on the web

Offline experiences in Microsoft Lists and OneDrive on the web are set up to automatically sign in users with their Microsoft Entra account credentials. If you enable this setting, people who used offline experiences in Microsoft Lists and OneDrive on the web previously and who are signed in on a Microsoft Entra-joined PC will no longer be able to set up offline experiences without entering their account credentials.


If the M365 browser extension isn't installed on users' Chromium-based browsers (Microsoft Edge, Google Chrome, and so on), we recommend leaving silent account configuration enabled to ensure the seamless operation of List sync.

Enabling this policy sets the following registry key value to 1:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive] "DisableNucleusSilentConfig" = "dword:00000001"

For more information about this feature, including troubleshooting steps, see Silently configure user accounts.

Control Lists sync on unmanaged devices and based on location

You can use the following settings to control access to Lists sync from unmanaged devices and configure network location-based access to List sync.

Control access from unmanaged devices

Control access to SharePoint and OneDrive based on network location