Disable OneDrive

Back in my MSP days, OneDrive caused more confusion than it solved in certain environments.
Not because it’s bad but because it was uncontrolled.

- Users syncing company data to personal devices.
- Multiple accounts tied to the same machine.
- Files living in places nobody could track.
 Sound familiar?

If you’re not actively managing OneDrive, sometimes the better move is to disable it.
Here’s how to stop OneDrive sync completely:

Open Registry Editor as admin

Go to:
 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive

If the key doesn’t exist, create OneDrive

Create or edit a DWORD (32-bit) value called:
 DisableFileSyncNGSC

Set it to: 1

What this does:
 Prevents the OneDrive sync client from running and stops file synchronization.

What this does NOT do:
- It does not block access to OneDrive in a web browser.
- It only controls sync behavior on the device.

Not every environment needs cloud sync everywhere. Keep the cloud data in company approved locations

Less data sprawl, Less risk, More control.

(if you want a free guide of other hardening tips like this or a better/automated method of hardening configuration settings email me at hardeningtips@senteon.co 😉 )