Block Internet - Allow OneDrive App

[petben]

Hello, we use Tutor Control to allow staff to lock computers, view thumbnails of screens etc and we have a policy 'block internet' that prevents the browser 'Edge' running. This worked fine but now we have moved to the cloud for files (OneDrive and SharePoint) we need to block Internet access, but allow access to these areas. I have setup a policy to block everything, then added every wildcard I can find on the internet related to OneDrive and SharePoint, and although I can browse to the cloud sites but I can not get the Onedrive App to sign in.

 

any ideas for what to add to my allow list? Not even Wireshark revealed anything....

 

 

[NegativeKillDeath]

You could have a look here and see what you might be missing. Microsoft 365 URLs and IP address ranges - Microsoft 365 Enterprise | Microsoft Learn

[Olliedawg]

Does it accept wildcards?

 

This is what I have in my Sophos Exceptions for OneDrive

 

 

• ^([A-Za-z0-9.-]*\.)?microsoft\.com/
  
• ^([A-Za-z0-9.-]*\.)?sharepoint\.com/
  
• ^([A-Za-z0-9.-]*\.)?windows\.net/
  
• ^([A-Za-z0-9.-]*\.)?1drv\.com/
  
• ^([A-Za-z0-9.-]*\.)?storage\.(live|msn)\.com
  
• ^([A-Za-z0-9.-]*\.)?onedrive\.com/
  
• ^([A-Za-z0-9.-]*\.)?live\.net/
  
• ^([A-Za-z0-9.-]*\.)?log\.optimizely\.com/
  
• ^([A-Za-z0-9.-]*\.)?live\.com/
  
• ^([A-Za-z0-9.-]*\.)?skydrive\.wns\.windows\.com/
  
• ^([A-Za-z0-9.-]*\.)?spoprod-a\.akamaihd\.net/
  
• ^([A-Za-z0-9.-]*\.)?livefilestore\.com/
  
• ^([A-Za-z0-9.-]*\.)?storage\.msn\.com/
  
• ^([A-Za-z0-9.-]*\.)?microsoftonline\.com/
  
• ^([A-Za-z0-9.-]*\.)?prod\.msocdn\.com/
  
• ^([A-Za-z0-9.-]*\.)?oneclient\.sfx\.ms/