How to disable personal OneDrive account sync with business devices in Intune
Allowing business people to sync their personal OneDrive to their business computing devices presents a significant risk to the company both data leakage and the introduction of unwanted malware.
The setting for this attribute is not new and was release some time back so it will be available in the Intune settings catalogue. This removes the need to import the OneDrive policy files OneDrive.admx and OneDrive.adml or the dependent Windows policy files, so I will not cover importing those into Intune.
Create a new configuration profile
Intune > Devices > expand Manage devices > Configuration > Policies (tab) >➕ Create > ➕New Policy
This is a setting from the Settings catalog
1. Configure as shown and select __Create__
2. Give the profile a meaningful name and description, then __Next__
3. Select Add settings
4. Scroll to OneDrive and click on it to load the settings
5. In the loaded settings in 'OneDrive' category section, scroll to and select the following
Prevent users from syncing personal OneDrive accounts (User)
6. The setting is disabled by default. In the pane to the left, change the slider to Enabled
7 Select __Next__
8. Add a scope on the Scope tags tab as required
9. On the Assignments tab, under Included groups, add a (device) group and then __Select__
10. Select __Next__
11. Review the settings and details, then select __Create__
Checks
When the new policy is in effect, should anyone try and setup or add a personal OneDrive, they'll see the following
But if you're really stuck open a case on the helpdesk.
