Onedrive data loss protection

[jmak]

Hi

 

I'm looking at moving home drives and some network shares to Onedrive for business and moving email to Office 365. Obviously there are lots of technical considerations, but this question is about what restrictions people would set to mitigate against data loss.

 

I've been looking at restricting Onedrive sync to domain joined machines - all teachers have school laptops. Is that overkill? Am I being over cautious and missing out on a key benefit of Cloud computing? Does this completely prevent access to data on OneDrive or can staff still sign in in the browser and download files?

 

Trying to tread the line between being sensible and being a blocker....

 

Thanks

[jmak]

Looking into this in more depth now:

 

I'm wading my way through the various options in the MS universe and can't get my head around which of the seemingly infinite options I need to choose. The plan is that all data will be either in SharePoint or OneDrive or O365 email.

 

What I want to do is prevent information that's potentially personal or confidential being downloaded onto personal devices or sent to people who shouldn't get it. I think I can do it with the free (included) version of Azure Information Protection. Can I put a default classification on a whole library which stops download to non-domain machines? The instructions I've seen show how users can classify each document, but I can't see that happening.... I'm thinking along the lines of a library for curriculum resources which you can access anywhere from any machine and a library/collection for everything else which will be marked as confidential.

 

Are there any guides? Or better suggestions?

[mrnoisy]

We are also contemplating the same options, you need to have a look at the security and Compliance setting in the admin centre, you can look at data loss prevention policies and also data classification from there, in particular labels, its appears to be highly configurable but theres not too many guides out there, maybe look at Microsoft mechanics on youtube I think they have recently covered this but I haven't had a chance to review it yet

[free780]

Try the free version until you get to the point of needing Ems. Windows Information Protection will stop people moving files from Onedrive.