Details
OneDrive provides access to external services for data storage, which must be restricted to authorized instances. Enabling this setting will prevent the use of personal OneDrive accounts for synchronization.
Solution
Configure the policy value for User Configuration >> Administrative Templates >> OneDrive >> ‘Prevent users from synchronizing personal OneDrive accounts’ to ‘Enabled’.
Group policy files for OneDrive are located on a system with OneDrive in ‘%localappdata%MicrosoftOneDriveBuildNumberadm’.
Copy the OneDrive.admx and .adml files to the WindowsPolicyDefinitions and WindowsPolicyDefinitionsen-US directories respectively.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.
References
- 800-53|CM-7a.
- CAT|II
- CCI|CCI-000381
- Rule-ID|SV-230564r569322_rule
- STIG-ID|DTOO607
- STIG-Legacy|SV-96851
- STIG-Legacy|V-82137
- Vuln-ID|V-230564