Deactivate Office 365 Full Control And

Deactivate Office 365 Full Control And

The user is by default added to the site with Full Control and the default group Everyone except external users, has read access on the personal site.

The reasons for someone wanting to do this vary but are usually of the variety of needing more control over what the users are saving to OneDrive and SharePoint.

For this we are better off using Office 365 Data Loss Prevention now that Microsoft has added the ability to block sharing content via OneDrive for Business and SharePoint Online.

It is important to note if users know the OneDrive for Business Site URL (ie.

OneDrive for Business site, even after performing these steps.

It is also important to note, this step will only disable OneDrive for Business and SharePoint Online use via OnlineWeb applications; it does not disabled the ability to save documents to OneDrive for Business or SharePoint via Office 365 ProPlus and Office 2016 applications installed on the users workstations, nor does it disable the ability for the OneDrive for Business Sync Client installed on users workstations, from syncing files to OneDrive for Business.

You will notice the Office Online Applications such as Word Online and Excel Online are also hidden, which disables the ability to create new Office files via the Office Online Applications.

This also allows us to control OneDrive for Business access via group membership.

It is important to note this will not have any effect on users who are currently already using OneDrive for Business.

In SharePoint Online, the Personal Site creation is enabled for all users via the group Everyone except external users.

This option gives users the ability to create the OneDrive for Business document library and if disabled, will disable OneDrive for Business access for those users.

To fix this, instead of using the default Everyone except external users group, create separate groups and assign them permissions directly.

In the example we created a Security Group ODB Users in Office 365 admin center and assign them Create Personal Site permission in User profiles.

After following the steps described in the screenshots, you will be able to control which users have the ability to initiate their OneDrive for Business creations via the Group ODB Users.

This effectively disables OneDrive for Business for new users not in the ODB Users group.

Remember, users who have used OneDrive for Business before these modifications will already have initiated their document library in SharePoint and these changes will not have any effect on them.

To deal with this scenario, we need to modify the permissions for each user folder that already exists, which is what we will discuss in Option 3 below.

This will normally apply only when existing users are currently using OneDrive for Business but we need to disable their OneDrive for Business access and still continue to have SharePoint Online access.

Search for the user and click on the dropdown menu next to it to get to the below options, then select Manage site collection owners.

This way you will be able to give the users their OneDrive access back at a later stage if necessary.

You will need to create a CSV file with url and Owner columns (sample below).

The user will still have access to the files already synced to their devices.

If they attempt to sync again they will get the below message in OneDrive Client after the login prompt.

This ensures that the PersonalSiteInstantiationState profile property of the user is updated which would help with smother personal site creation if re-enabled in the future, and will also ensure no impact on any dependent features.

This is important because the personal site contains granular permissions which will not be removed by simply changing the Site Collection Administrator.

How To Deactivate Office 365 For Mac