Block Personal OneDrive Accounts Using Microsoft Intune

This guide walks through the process of creating a configuration profile in Microsoft Intune to prevent users from syncing personal OneDrive accounts on Windows 10 or later devices. 

1. Log in to Microsoft Intune Admin Center

Navigate to: https://intune.microsoft.com

Then go to:

• Devices

• Under Manage devices, select Configuration

2. Create a New Configuration Profile

• Click Create

• Choose the following:

  • Platform: Windows 10 and later

  • Profile type: Settings catalog

3. Define Profile Basics

• Name your policy (e.g., MHEG Standard Policy)

• Optional: Add a description

• Click Next

4. Add Configuration Settings

• Click + Add settings

• In the Settings picker:

  • Browse by category → Select OneDrive

  • Choose: Prevent users from syncing personal OneDrive accounts (User)

  • Click the X to close picker

5. Enable the Setting

• Toggle the option to Enabled

• Click Next

6. Assign Scope Tags (Optional)

• Default tags will be applied unless changed

• Click Next

7. Assign the Profile

• Click Add all users and/or Add all devices (as required)

• Click Next

8. Review and Create

• Review the configuration settings

• Confirm that the OneDrive restriction is Enabled

• Click Create

✅ Outcome

Once deployed, this policy will block users from syncing personal OneDrive accounts on enrolled Windows 10/11 devices. Only organizational OneDrive accounts will be permitted.

? Notes

• This policy applies at the user level.

• Ensure devices are Entra-joined and properly enrolled in Intune.

• Users may see an error when attempting to sign in with personal OneDrive accounts.