⚙️🪟🧑💼🔓CP - OneDrive - Allow personal OneDrive
What this page is about 🔓
This policy is not the default. It is also not meant for broad deployment.
Instead, this is the countermeasure to override the ⚙️🪟🧑💼CP - OneDrive - Block personal OneDrive policy — but only for those users you explicitly allow.
Why? Because Intune applies the most restrictive setting, and if you’ve applied a block policy to all users, simply removing someone from that group won’t remove the block.
You’ll need to apply a policy that deliberately unblocks it.
Why this is necessary 🤔
Let’s say:
- You block personal OneDrive sync for everyone (good!)
- The CEO wants access anyway (okay, fine 😑)
- You exclude the CEO from the block policy group
Still blocked.
Why? Because Intune remembers the original setting.
➡️ Enter this policy:
You assign it directly to the exclusion group (🛡️🧑💼👈🔓Group - Personal OneDrive Allowed users), and it actively says:
"Hey Intune, it’s okay — this one can use personal OneDrive."
🛠️ OneDrive Personal Account Allow Configuration
| Setting | State | Details |
|---|---|---|
| Block syncing of personal OneDrive accounts | Disabled | Required to override any previously assigned “Enabled” setting |
👥 Group Assignments
✅ Included groups:
❌ Excluded groups:
- (none) — only assign to those who need the exception
💡 SuperVision Tip
SuperVision handles identity and group management across tenants.
This policy uses group membership — not tags — so SuperVision helps by:
- Maintaining consistent group naming across tenants
- Assigning users dynamically to:
🛡️🧑💼👈🔓Group - Personal OneDrive Allowed users
⚠️ Be sure to:
- Document who belongs in this group
- Have written approval from the customer
- Avoid “accidental exceptions” at all costs
Final Thoughts 🔚
This is not a "green light for everyone" config. It’s a targeted override used only when someone absolutely needs access to their personal OneDrive account — and you're willing to take that risk.
Use this only:
- In combination with the block policy
- With strict governance
- With the audit trail to back it up
Want control? Start here with the block policy
Want exceptions? Use this — carefully. 🔓