OneDrive - Local Folders On Demand

[kev_b31]

Good afternoon all!

 

We have OneDrive here setup running across our network. Staff using the on demand/local folders on laptops and desktops are absolutely fine, however, when our students try, they get "This operation has been cancelled due to restictions in effect on this computer."

 

After looking at this thread http://www.edugeek.net/forums/cloud-services/195530-onedrive-demand-operation-has-been-cancelled.html I have seen that a fix for this is to grant users access to the C drive. This would make sense here as staff have the C drive hidden but access, while students have access disabled. I would really like to keep this the case and not open the C drive up for students.

 

Has anyone found a way around this or a better solution to the problem?

 

I did ask in that thread and message one of the users but have had no reply.

 

thanks in advance.

 

Kev B

[Katy]

We found you have to undo the "Prevent access to these drives" GPO, but you can keep the "Hide these drives" GPO.

For some reason when they type C: into the address bar it tells them "Access to this resource has been disallowed" but I'm not sure why, whether we have a third GPO somewhere causing this (which is nice as it is enough to let Onedrive work without them being able to browse the drive).

[kev_b31]

Hi Katy,

 

Yer, thats what i found also. Its nice to know you seem to have a way to still prevent C drive access with OneDrive working. I will setup some tests to see if i can replicate your setup. If you happen to come across what it is that is still preventing access for students then please let us know.

 

thanks

[Katy]

I've found it! Under User -> Policy -> Admin Templates ->Start Menu and Taskbar -> Remove Run menu from Start Menu. Side effect is they can't type C: into the address bar and get anywhere.

 

Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.

 

If you enable this setting, the following changes occur:

 

(1) The Run command is removed from the Start menu.

 

(2) The New Task (Run) command is removed from Task Manager.

 

(3) The user will be blocked from entering the following into the Internet Explorer Address Bar:

 

--- A UNC path: \\\

 

---Accessing local drives: e.g., C:

 

--- Accessing local folders: e.g., \temp>

 

Also, users with extended keyboards will no longer be able to display the Run dialog box by pressing the Application key (the key with the Windows logo) + R.

 

If you disable or do not configure this setting, users will be able to access the Run command in the Start menu and in Task Manager and use the Internet Explorer Address Bar.

 

 

 

Note:This setting affects the specified interface only. It does not prevent users from using other methods to run programs.

 

Note: It is a requirement for third-party applications with Windows 2000 or later certification to adhere to this setting.

Edited February 11, 2019 by Katy