OneDrive for Business and restricted content

[KenZ]

Hi Guys

 

since more schools are using onedrive to allow students to store files, how do you block restricted content?

For instance, a student uploads a pornographic video or picture to their onedrive storage from home. The next day at school, they accesses their onedrive and the video/picture gets downloaded to the device within the school, bypassing any content filters that might be in place for normal web browsing. Once the video/picture is on the device, he can display it on the computer or email it internally.

 

So my question is, is there any way to block content on a OneDrive account in the same way you can block content from the internet when someone uses a browser?

 

Thanks

 

KenZ

[ZeroHour]

You can block certain extensions using: https://admin.onedrive.com/?v=SyncSettings

Also you can set limited alerts if certain things happen at: https://protection.office.com/alertsdashboard

 

Images will be a bit harder to manage though but you can access drives as an admin.

[KenZ]

Hi ZeroHour

 

unfortunately blocking extensions is not an option. They will need to be able to store pictures and videos onto their drives if it's part of their coursework.

 

Regards

 

KenZ

[free780]

The same could have happened with Home drives. I guess you need Impero or similar and someone to monitor.

[KenZ]

hi free780

 

Only if the Home drives are accessible from the internet...

 

can Impero categorize photos and videos on the fly?

 

To be honest, the reason I started this thread is to find out how other admins are "controlling" what gets stored on OneDrive when it is used as a principle storage device for coursework, and hence generally accessible from all internal devices.

The same issues would generally apply to other cloud storage solutions such as Google Drive, Dropbox, etc. There must be a generally available "solution" to this problem, otherwise this is a huge vulnerability in the defences of schools as regards content filtering. What's the point in installing expensive internet content filters if the students can download the stuff from home, store it on their cloud storage space, and access it from any internal school device?

 

Regards

 

KenZ

 

Regards

 

Ken

[jezi55]

We are just about to go live with onedrive mapped drives across our site, i have enabled it for staff but reluctant to enable for students because of the limited restrictions. Unfortunately it only looks like you can block syncing certain file types across the site and not per AD group/student account. So if i block powershell or exes it will block it for me also.. I think students need to be educated by staff that if they have that kind of material in their drives then they are responsible and will suffer the consequences.

[free780]

Yes you need P2 licensing to lock down per aad group. I guess you expect your students to not upload things they shouldn't or face consequences. All content on Onedrive is AV scanned.