Sharepoint Online - Block EXE Upload

[2097]

Hi ,

 

Any one no of a way to block Exe , Bat etc being uploading via the online website version of onedrive ? I have disabled them from the sync .

 

Cant seem to see an option to block them fully from sharepoint/onedrive

 

Thanks

2097

[Oaktech]

OneDrive gives you the option to prevent users from uploading certain types of files:

 

Sign in to the OneDrive admin center as global or SharePoint admin.

Click Settings on the LHS pane

Click Sync towards the bottom of the central pane.

Select the Block syncing of specific file types checkbox.

Enter the file name extensions you want to block. For example, exe or mp3.

 

https://learn.microsoft.com/en-US/sharepoint/block-file-types?WT.mc_id=365AdminCSH_spo

[2097]

OneDrive gives you the option to prevent users from uploading certain types of files:

 

Sign in to the OneDrive admin center as global or SharePoint admin.

Click Settings on the LHS pane

Click Sync towards the bottom of the central pane.

Select the Block syncing of specific file types checkbox.

Enter the file name extensions you want to block. For example, exe or mp3.

 

https://learn.microsoft.com/en-US/sharepoint/block-file-types?WT.mc_id=365AdminCSH_spo

 

Thanks , Thats already been done though.

 

All that does it stops the installed onedrive client from syncing the blocked files.

 

It doesnt stop them form logging into Office.com and uploading/downloading what they want.

[Oaktech]

Thanks , Thats already been done though.

 

All that does it stops the installed onedrive client from syncing the blocked files.

 

It doesnt stop them form logging into Office.com and uploading/downloading what they want.

 

Hmmm... I need to raise a case with MS about a related issue, so I'll see if they have a better answer.

[SW-ICT]

Hmmm... I need to raise a case with MS about a related issue, so I'll see if they have a better answer.

 

Hi, Sorry to intrude.

Did you find an answer to this?

 

Im tasked with the same Job but can only block the syncing of EXE and other files

[mcolbourn]

On 19/10/2023 at 15:20, SW-ICT said:

 

Hi, Sorry to intrude.

Did you find an answer to this?

 

Im tasked with the same Job but can only block the syncing of EXE and other files

Just wondering if you find a way to stop exe files as we have just run into this ourselves

 

 

[ITea]

Hi Oaktech

 

Did you get any joy with MS on this matter?

 

[Oaktech]

4 minutes ago, ITea said:

Hi Oaktech

 

Did you get any joy with MS on this matter?

 

Not really, it was taken on board and I was told at the time it was roadmapped but I haven't seen anything further on it.

[ITea]

17 minutes ago, Oaktech said:

Not really, it was taken on board and I was told at the time it was roadmapped but I haven't seen anything further on it.

Thanks for getting back. Can I ask if you have used anything to overcome this?

 

Options to us at the moment are applocker, which isn't without it's pitfalls, as well as Sophos Endpoint/Application Control policies, which we're still testing. 

 

Air Lock Digital looks good, but we haven't got any further than a brief look, or any pricing. 

[Oaktech]

24 minutes ago, ITea said:

Thanks for getting back. Can I ask if you have used anything to overcome this?

 

Options to us at the moment are applocker, which isn't without it's pitfalls, as well as Sophos Endpoint/Application Control policies, which we're still testing. 

 

Air Lock Digital looks good, but we haven't got any further than a brief look, or any pricing. 

We use applocker to prevent them from running anything. It looks like there may be something that can be done with the Defender version we're getting from September but that's being looked into by my MAT so I don't have any details.

[ITea]

Thanks for the info 👍 We're looking into applocker too. You definitely need to be very careful with the parameters, which our early testing has confirmed...

[Olliedawg]

Yea can quite easily stop a LOT of stuff working with AppLocker unintentionally lol.. be sure to do plenty of testing

 

I think my default setup a few years ago actually broke the windows 11 start menu somehow

[ITea]

13 minutes ago, Olliedawg said:

Yea can quite easily stop a LOT of stuff working with AppLocker unintentionally lol.. be sure to do plenty of testing

 

I think my default setup a few years ago actually broke the windows 11 start menu somehow

You're not wrong! Glad we're not the only ones 🙂 We got fairly rattled by our first test (which we thought we'd only applied to one test user). Subsequent research revealed some missing details.