Requirement: Block syncing of specific file types in OneDrive for Business.
How to Block File Types in OneDrive for Business?
By default, Users can upload all type of files in their OneDrive for Business folder. However for security, we can restrict users from syncing specific file types in OneDrive for Business.
- Login to OneDrive Admin center at https://admin.onedrive.com
- Click on “Sync” link in the left navigation >> Enable “Block syncing of specific file types” checkbox and enter each file type per line.
- Click on “Save” to commit your changes.
These changes may take up to 24 hours to reflect. In the next sync cycle, If OneDrive for Business client detects any file matching blocked file extension, any attempt to sync a blocked file type will give an error message “Item name is not allowed in cloud”!
Also on OneDrive client, users get “OneDrive needs your attention. <File-Name> The name of type isn’t allowed. Please rename the item or remove it from yoru OneDrive.” error.
PowerShell to Block File Types in OneDrive for Business:
We can also block file types using PowerShell as:
#Parameters $TenantAdminURL = "https://crescent-admin.sharepoint.com" #Connect to Admin Center Connect-SPOService -Url $TenantAdminURL -Credential (Get-credential) #Set blocked File types Set-SPOTenantSyncClientRestriction -ExcludedFileExtensions "exe;mp3;mp4"
This PowerShell script blocks file types exe, mp3 and mp4 to not be synced with OneDrive for Business. Microsoft reference on block syncing of specific file types: https://docs.microsoft.com/en-us/OneDrive/block-file-types