Policy on OneDrive Use at Home

[MartinT]

With the current remote working, we are finding staff using their home computers for work and, in some cases, installing OneDrive (OneDrive for Business).

 

What, if any, policy does your school apply to home use of OneDrive, bearing in mind that the computer can be left with potentially GDPR & safeguarding sensitive files on their local drive? I am interested even if you have no policy at present.

[kennysarmy]

Staff here can only use encrypted USB sticks which we provide if they need access to confidential data off-site.

[jmak]

Staff laptops with Conditional Access set up so that users can't access confidential school content on non-school devices.

 

You can refine this so that some content is accessible (e.g. allow lesson plans, but block admin areas).

 

USB sticks were banned by AUP. I would have liked to block, but it was too complicated as we needed to allow access to SD cards for photo transfers.

[MartinT]

Thanks, but I'm specifically asking about home computers used for remote working.

[free780]

If you have AAD P1 or above you can block access to OneDrive via Conditional Access.

 

You can block the sync client from non domain devices globally without the licensing.

 

If you go further you can actually use Information Protection to encrypt the files and force authentication wherever they go.

[MartinT]

Ok, thanks. It's not the draconian approach we want. Another option will be to disable Files on Demand so that no local files are left on the computer.

 

However, that would need to be voluntary.