Onedrive - Allow Syncing Only On Computers Joined To Specific Domains

Recently, Microsoft announced changes to Office 365 with the ability to better control OneDrive for Business. OneDrive for Business syncing is used to prevent data from being copied to non-domain-joined PCs, based on the list of approved domains as well as to change the storage limit for users.

In this blog, we are going to see how to allow syncing only on computers joined with specific domains.

Allow syncing only on PCs joined to specific domains

  • Open the OneDrive Admin Center and click "Sync".

      
  • Select the"Allow syncing only on PCs joined to specific domains" check box.
  • Click "Add domains".
  • Add the GUID of each domain where you want to allow users to sync files.

To get the Object GUID, run the below command in Active Directory PowerShell.

  1. $domains = (Get-ADForest).Domains; foreach($d in $domains) {Get-ADDomain -identity $d | Select ObjectGuid,Name}  
 
  • If you want to prevent Mac OS users from syncing entirely, select the "Block sync on Mac OS" check box.
  • Click "Save" on the Sync page.

 If anyone tries to sync the OneDrive from restricted domains, they will get the below alert message.