There needs to be a way of setting this at an organizational level. I am able to turn off sharing for non-owners via powershell, however it requires me to create a script to connect to each person's OneDrive, and it leaves the "Allow access requests" unchecked.
Goal: Require any re-sharing to be approved by the owner for the entire organization.18 votes
You can set policy on owner-only sharing and access requests for all OneDrives by using the Set-SPOTenant PowerShell command. Look at the -ODBAccessRequests and -ODBMembersCanShare documented here: https://docs.microsoft.com/en-us/powershell/module/sharepoint-online/set-spotenant
Even though the upload bandwidth throttling through GPO is already available, the download bandwidth throttling is even more important to guarantee that operational processes are not impacted.
Please implement this as well.322 votes
We have a policy to limit download bandwidth. More info about it here: https://docs.microsoft.com/onedrive/use-group-policy#DownloadBandwidthLimit.
We need the ability to control the total amount or % of space consumed on a PC device when sync'ing OD4B content. We are seeing where a user may have a large amount of data in OD4B (1TB+) and on laptops and surface devices this will consume all the available space. Controls that can be managed by the Administrator to limit the amount of space or the ability to sync only the tree structure (like on IOS) is required.341 votes
Check out these two new group policy settings!
[Reuben updated the title for clarity]
Fairly self explanatory - Syncing company data to all of your personal machines is great but what happens when you leave the company or something needs to be retracted?
Having multiple copies of synchronized libraries on untrusted machines is a huge security risk, administrators should have the option to see which machines are synchronized to OneDrive for Business and SharePoint libraries and be able to stop synchronization and/or wipe information from these machines.728 votes
We wanted to resolve this one as done. If your organization is using Intune to manage mobile devices and PCs, admins can perform remote wipe of those devices that no longer should have access to company content.
You can read more here:
Please open a new item if the request is different from this.
- Don't see your idea?