🚫 Disable Personal OneDrive Account Syncing in Work Accounts Using Intune

Microsoft has recently introduced a new OneDrive prompt encouraging users to sync personal Microsoft accounts on corporate devices. While this may improve convenience, it poses a significant data leakage risk and violates many organizations’ compliance policies.

As IT administrators, we must stay ahead by preventing personal OneDrive account syncing on corporate endpoints. Fortunately, Microsoft Intune offers a straightforward way to enforce this using the Settings Catalog.

Here’s how to do it in just a few clicks 👇

✅ Step-by-Step Guide to Block Personal OneDrive Syncing via Intune

1. Navigate to Configuration Profiles

• Go to the Microsoft Intune admin center.
• Click Devices → Configuration.
• Select Create → New profile.

2. Choose Profile Type

• Platform: Windows 10 and later
• Profile type: Settings catalog
• Click Create.

3. Add the OneDrive Setting

• Under Configuration settings, click + Add settings.
• Search for DisablePersonalSync.
• From the OneDrive category, check : ✅ Prevent users from syncing personal OneDrive accounts (User)
• Set the value to Enabled.
• Click Next

4. Assign to Target Users

• Under the Assignments tab, choose a group (e.g., All users or a specific security group).
• Click Next and then Create.

🔐 Why This Matters

By enforcing this policy, you :

• Prevent data exfiltration through personal cloud storage
• Reduce insider threat exposure
• Comply with data residency and compliance frameworks (e.g., ISO, NIST, GDPR)

This small change ensures corporate data stays within managed environments. If your organization hasn't implemented this yet, now's the time to tighten the bolts.

Thanks

Aymen EL JAZIRI

System Administrator