Back in my MSP days, OneDrive caused more confusion than it solved in certain environments.
Not because it’s bad but because it was uncontrolled.
- Users syncing company data to personal devices.
- Multiple accounts tied to the same machine.
- Files living in places nobody could track.
Sound familiar?
If you’re not actively managing OneDrive, sometimes the better move is to disable it.
Here’s how to stop OneDrive sync completely:
Open Registry Editor as admin
Go to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive
If the key doesn’t exist, create OneDrive
Create or edit a DWORD (32-bit) value called:
DisableFileSyncNGSC
Set it to: 1
What this does:
Prevents the OneDrive sync client from running and stops file synchronization.
What this does NOT do:
- It does not block access to OneDrive in a web browser.
- It only controls sync behavior on the device.
Not every environment needs cloud sync everywhere. Keep the cloud data in company approved locations
Less data sprawl, Less risk, More control.
(if you want a free guide of other hardening tips like this or a better/automated method of hardening configuration settings email me at hardeningtips@senteon.co 😉 )