Next, add Office 365 SharePoint Online as the application to be applied to: For testing purposes I’m assigning to Adele Vance (IMPORANT: Don’t lock yourself out! Careful planning is required when assigning to all users). Next, assign it to specific users or groups of users. First, give it a name, “OneDrive Block JPEG and PDF”. Step 1: Create a Azure AD Conditional Access Policyįrom within the Azure portal -> Azure Active Directory -> Conditional Access -> New Policy I am going to create a new policy. The two products that make up this solution are Azure Active Directory and Microsoft Cloud App Security. So, how do we do this?Īzure Active Directory Conditional Access and Microsoft Cloud App Security Conditional Access App Control to the rescue! These two products are part of Microsoft 365 E5 or EMS E5 or my new favorite: Microsoft 365 E3 + Identity & Threat Protection.
In other words, we need to block the ability for an end-user to download these two file types from OneDrive. JPEG files are highly confidential and thus we want to make sure they never leave OneDrive in Office 365 and can only be viewed in a web browser. PDF and sometimes photos in the form of a. These design plans often contain additional documentation that are in the form of a. My organization, an engineering firm, designs buildings for their commercial and government clients. If you want that extra ply in the tinfoil hat, I highly recommend protecting and encrypting those files with Azure Information Protection as that extra layer of protection.Īlso, it’s important to note,the method below at the time of this writing is in public preview.
IMPORTANT: Nothing is 100% secure and it’s all about defense in depth. Note: There are other methods to restrict those files from being synchronized using the OneDrive desktop client, we won’t cover those today however (but are accessible in the SharePoint Online Admin Portal) I’m going to walk you through how to do this, and in return, make you look like an IT Rockstar to your organization! Do you have a business requirement to block the download of specific files or file types from OneDrive? What about detailed auditing to understand what files are downloaded or viewed? Well, today is your lucky day – because this is all possible with Microsoft security technology and takes minutes to create.
0 kommentar(er)
