After the new configuration is in place, a user trying to add a OneDrive account to a computer that is not domain joined will receive an error message after they sign in and choose a location to sync to. The sync policy change takes around an hour before it is effective. To retrieve the domain GUID, run the following command from a computer or server that has the Active Directory PowerShell module available. OneDrive sync restrictions can be configured using the OneDrive admin portal, or the SharePoint Online PowerShell module.īefore you can restrict OneDrive to domain joined computers, you first need to know the GUID of the Active Directory domains that will be allowed to sync.
The general idea is that a domain-joined computer that is within the control of corporate IT will be more secure than the average personal computer that staff own.
To address those concerns it’s possible to restrict OneDrive so that it only synchronizes files to domain-joined computers. If the personal computers are not well secured, such as having encrypted drives and good antivirus software, or if the personal computers are shared with unauthorized people, then the corporate data could be exposed. For some organizations there is a concern when deploying OneDrive for Business that users will access corporate data from their personal computers.
0 kommentar(er)
