This setting will not take effect if you've enabled "Prompt users to move Windows known folders to OneDrive" or "Silently move Windows known folders to OneDrive." If the user has already moved their known folders, the files in those folders will remain in OneDrive. This setting prevents users from moving their Documents, Pictures, and Desktop folders to any OneDrive for Business account. Prevent users from moving their Windows known folders to OneDrive I even looked at enabling "Prevent users from moving their windows known folders to onedrive"Ī1: From the Use Group Policy to control OneDrive sync client settings, we can see: just setting the GPOs to disabled didn't seem to work for me. Here are the answers for our questions: Q1:What is the correct way to disable known folder move once its been enabled e.g. Thank you for posting in our TechNet forum. I even looked at enabling "Prevent users from moving their windows known folders to onedrive"Ģ) What is the behaviour for the files that were in my docs, my pics, my desktop and sync'd to one drive once you disable. I logged outġ) What is the correct way to disable known folder move once its been enabled e.g. When i set this Machine Group policy to disable it, I ran a gpupdate /force it on the client and checked it removed the two associated registry keys but the my documents, my pics, desktop and associated files were still showing as synchronised. Prompt users to move Windows known folders to OneDrive -> disabled Silently move Windows known folders to OneDrive -> disabled I then wanted to disable the GPO policy to see what the behaviour was They are all machine group policy, and i logged in with a few test accounts and it behaved as expected synchronisnig the files up to one drive.
I was testing on a windows 7 client machine (yes i know support expires soon) Prompt users to move Windows known folders to OneDrive (incase an error occurs).Silently move Windows known folders to OneDrive.Silently sign in users to the OneDrive sync client with their Windows credentials.In a lab environment i enabled these 3 GPOs: “Disable options to download, print, and copy for commenters and viewers” is a neat addition, but it’s not a foolproof security or privacy feature.I posted this in one drive forum but was asked to post here as GPO related.so: It’s a way to communicate that the file owner doesn’t want the contents to be shared broadly. This feature is meant as a deterrent and a reminder.
Google described the feature as “perfect for when the file you’re sharing contains sensitive information that you don’t want shared broadly or leaked.” That said, remember that you’re still sharing the file: If someone really wants, they can manually reproduce the content, or just screenshot each page. This is very much limited to the Google ecosystem: If you share the file via email, Google can’t help you.Ī notification at the top of the File and Edit menus will let the user know a given file has been limited: Being the file owner is a requirement (though if you really want, you could make a copy of the file, limit it, and then re-share it).įinally, this feature removes all entry points for downloading, printing, and copying in not just Google Drive, but also Google Docs, Google Sheets, and Google Slides on all platforms.
This makes sense: If a file is shared with you, you can’t then go ahead and disable downloading, printing, and copying for it. Next, you can’t enable this feature if you don’t own the file. First off, this is only available on Google Drive for the Web (though presumably it will arrive on other platforms sometime soon). There are some more restrictions you should be aware of. On the flipside, developers can access this functionality through the Google Drive API. Note that you can’t choose to limit one or two of the three options: If you’re disabling downloading, you’re also disabling printing and copying. Check the “Disable options to download, print, and copy for commenters and viewers” box and click “Save changes.” To use the feature, open the sharing dialogue from any Google Drive file and click on Advanced in the lower right corner.