Prevent Users from Disabling OneDrive


gnulab

Well-known member
Local time
6:29 PM
Posts
38
OS
Windows 11
Hi,

How do I prevent users from doing these to onedrive:
- uninstall
- disable sync
- exit software

without resorting to software. Could I do it via Group Policy?

Henry
 
Windows Build/Version
25H2 (OS Build 26200.8037)

My Computer

System One

  • OS
    Windows 11
    Computer type
    Laptop
    CPU
    AMD Ryzen AI 7 350 w/ Radeon 860M
    Motherboard
    LENOVO LNVNB161216
    Memory
    32.00 GB
    Graphics Card(s)
    32.00 GB
    Sound Card
    AMD Audio Device
    Screen Resolution
    2880 x 1800 x 32 bits (4294967296 colors) @ 60 Hz
    Hard Drives
    WD PC SN7100S SDFPMSL-1T00-1101 1TB
I don't think there's any simple or reliable way to do that- however see thoughts below.

Example:
Examine the policy description in Option 1 step 5 - disabling access also means stopping syncing.

You'd need to consider access via the tray icon, the registry, the task manager and if available, Group Policy.

Someone may be able to suggest some approach.

AI suggests: (and some these don't appear to be relavant to your question or what I asked!)
To stop users from disabling OneDrive sync, use Group Policy (GPO), Microsoft Intune, or registry edits to enforce policies. Key methods include enabling "Silently sign in users" and "Prevent users from syncing personal OneDrive accounts". For IT admins, enforcing configuration policies prevents users from accessing settings to pause or unlink their accounts.
Key Policies to Enforce (Group Policy/Intune):
  • Prevent users from syncing personal OneDrive accounts: Set to Enabled.
  • Silently sign in users to the OneDrive app with their Windows credentials: Ensures sync stays on.
  • Prevent users from redirecting their Windows known folders to their PC: Restricts removing folder backups.
  • Disable OneDrive from launching at startup: While not disabling it entirely, disabling this in Task Manager/Group Policy prevents easy user-level disabling.
Alternatives for Managed Environments:
  • Microsoft 365 Admin Center: Use to set "Allow syncing only on PCs joined to specific domains".
  • Registry Edit: Configure DisablePersonalSync to prevent personal account usage.
For individual computers, users can disable sync by navigating to OneDrive Settings > Account > Unlink this PC. The above policy restrictions prevent these actions.
--------------------------
1. Configure Group Policy (GPO) for Lockdown

Use these policies in your Active Directory or Intune environment to force OneDrive to remain active:

  • Prevent users from unlinking their business account: This keeps the account connected to OneDrive.
  • Prevent users from syncing personal OneDrive accounts: This prevents users from switching to a personal account, forcing them to use the corporate one.
  • Silent account configuration: Use the policy "Silently sign in users to the OneDrive sync app with their Windows credentials" to ensure it starts automatically.
  • Prevent usage for file storage: Enable "Prevent the usage of OneDrive for file storage" to manage the app via policy rather than user

Note: OneDrive is horribly intrusive and complex and its effects can catch people out. Personal view- and expressed by others: avoid.
 
Last edited:

My Computer

System One

  • OS
    Windows 11 Pro
    Computer type
    Laptop
    Manufacturer/Model
    Lenovo t480s
    CPU
    i7-8650U
    Memory
    16GB
    Graphics Card(s)
    Intel UHD 620
    Screen Resolution
    1920x1080
    Hard Drives
    C SN810 SDCPNRY-512G-1006
    Browser
    Edge, Firefox
    Antivirus
    Defender
If you run a managed environment you can control it through group policy.

Here is the question I asked co-pilot. While viewing this forum thread I suggest you ask it the same question.
How to Prevent Users from Disabling, uninstalling, or exiting onedrive?

Co-pilot tells you how to accomplish this. It is interactive. At the end, give co-pilot your input and co-pilot responds accordingly going so far as to offer to give a step by step guide or build a .reg file for you.
 

My Computers

System One System Two

  • OS
    Windows 11 Pro 25H2 26200.8655
    Computer type
    PC/Desktop
    Manufacturer/Model
    Dell Optiplex 7080
    CPU
    i9-10900 10 core 20 threads
    Motherboard
    DELL 0J37VM
    Memory
    32 gb
    Graphics Card(s)
    none-Intel UHD Graphics 630
    Sound Card
    Integrated Realtek
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    2x1tb Solidigm m.2 nvme /External drives 512gb Samsung m.2 sata+2tb Kingston m2.nvme
    PSU
    500w
    Case
    MT
    Cooling
    Dell Premium
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    so slow I'm too embarrassed to tell
    Browser
    #1 Edge #2 Firefox
    Antivirus
    Defender+MWB Premium
  • Operating System
    Windows 11 Pro 24H2 26200.8457
    Computer type
    PC/Desktop
    Manufacturer/Model
    Beelink Mini PC SER5
    CPU
    AMD Ryzen 7 6800U
    Memory
    32 gb
    Graphics card(s)
    integrated
    Sound Card
    integrated
    Monitor(s) Displays
    Benq 27
    Screen Resolution
    2560x1440
    Hard Drives
    1TB Crucial nvme
    Keyboard
    Logitech wired
    Mouse
    Logitech wireless
    Internet Speed
    still too embarrassed to tell
    Browser
    Firefox
    Antivirus
    Defender
    Other Info
    System 3 is non compliant Dell 9020 i7-4770/24gb ram Win11 PRO 26200.8457

Latest Support Threads

Back
Top Bottom