For maximum protection against accidental data leakage due to user error or unintentional data leakage block download policy in SharePoint Online should be configured. It provides adequate protection against unauthorized download activities while allowing legitimate file-sharing operations seamlessly between colleagues inside & outside organizational boundaries. Suppose you want to block all file downloads in a particular SharePoint site for security reasons so that no one can download the important files. You must configure the block downloads policy in that particular site to secure your files and documents. Now let\u2019s see how to create a conditional access policy to block file downloads in SharePoint Online and OneDrive.<\/p>\n
Configure Conditional Access Policy to Block SharePoint Downloads<\/strong><\/h2>\nFollow the steps below to check how to configure a conditional access policy to block the download of the documents in SharePoint Online and OneDrive.<\/p>\n
\n- Visit Office.com and click on Admin to open the Microsoft 365 Admin Center.<\/li>\n
- In the Admin Center, click show all and open Azure Active Directory; it will take you to the Microsoft Entra Admin center.<\/li>\n<\/ul>\n
![\"Click](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/1.-Click-azure-active-directory.png\")
<\/p>\n
\n- Now click on Protect & Secure, then Conditional Access. The policies window will open; now click on New Policy to create a new policy.<\/li>\n<\/ul>\n
![\"click](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/2.-click-on-new-policy.png\")
<\/p>\n
\n- A new window will open, asking for policy details.\n
\n- Type the name of the policy in the name field.<\/li>\n
- In the Users field, select the users or groups you want to include in the policy to block downloads in SharePoint Site and OneDrive. Once selected, click on the select button.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
![\"select](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/3.-select-users-and-group.png\")
<\/p>\n
\n- Now Click on Cloud apps or actions, then click on select app and choose Office 365 SharePoint Online. <\/strong>After that, click on the Select button to save changes.<\/li>\n<\/ul>\n
![\"select](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/4.-select-app-SharePoint-Online.png\")
<\/p>\n
\n- \n
\n- Under conditions, choose the condition you want to use to block downloads of files in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
![\"provide](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/5.-provide-conditions.png\")
<\/p>\n
\n- \n
\n- In Session, select Use Conditional Access App control and choose Block Downloads (Preview) and click on select button. In Enable policy, click on the ON option and then click on create button to create the conditional access policy to block downloads in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
![\"choose](\"https:\/\/www.cloudbik.com\/resources\/wp-content\/uploads\/2023\/03\/6.-choose-block-downloads.png\")
<\/p>\n
Once you click on create button, it will create the conditional access policy to block downloads of files in SharePoint Online and OneDrive for the conditions you selected.<\/p>\n
Block Download Policy for SharePoint Online and OneDrive<\/strong><\/h2>\nMicrosoft Syntex SharePoint Advanced Management License includes a block SharePoint download policy feature and is currently in the preview stage. For now, you can use Windows PowerShell to block downloads for SharePoint Online.<\/p>\n
Enable Block Download Policy using Windows PowerShell for SharePoint Online.<\/strong><\/h3>\n\n- First, you need to download SharePoint Online Management Shell if you do not have one installed.<\/li>\n
- Once installed, connect to SharePoint Online by entering the below command.<\/li>\n<\/ol>\n
Connect-SPOService \u2013Url https:\/\/yourdomain-admin.sharepoint.com\/<\/pre>\nOnce entered the command login using Admin credentials<\/p>\n
Note:<\/strong> use your tenant name in place of yourdomain.<\/p>\n
<\/p>\n
- \n
- Now click on Protect & Secure, then Conditional Access. The policies window will open; now click on New Policy to create a new policy.<\/li>\n<\/ul>\n<\/p>\n
- \n
- A new window will open, asking for policy details.\n
- \n
- Type the name of the policy in the name field.<\/li>\n
- In the Users field, select the users or groups you want to include in the policy to block downloads in SharePoint Site and OneDrive. Once selected, click on the select button.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/p>\n
- \n
- Now Click on Cloud apps or actions, then click on select app and choose Office 365 SharePoint Online. <\/strong>After that, click on the Select button to save changes.<\/li>\n<\/ul>\n<\/p>\n
- \n
- \n
- \n
- Under conditions, choose the condition you want to use to block downloads of files in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/p>\n
- \n
- \n
- \n
- In Session, select Use Conditional Access App control and choose Block Downloads (Preview) and click on select button. In Enable policy, click on the ON option and then click on create button to create the conditional access policy to block downloads in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<\/p>\n
Once you click on create button, it will create the conditional access policy to block downloads of files in SharePoint Online and OneDrive for the conditions you selected.<\/p>\n
Block Download Policy for SharePoint Online and OneDrive<\/strong><\/h2>\n
Microsoft Syntex SharePoint Advanced Management License includes a block SharePoint download policy feature and is currently in the preview stage. For now, you can use Windows PowerShell to block downloads for SharePoint Online.<\/p>\n
Enable Block Download Policy using Windows PowerShell for SharePoint Online.<\/strong><\/h3>\n
- \n
- First, you need to download SharePoint Online Management Shell if you do not have one installed.<\/li>\n
- Once installed, connect to SharePoint Online by entering the below command.<\/li>\n<\/ol>\n
Connect-SPOService \u2013Url https:\/\/yourdomain-admin.sharepoint.com\/<\/pre>\n
Once entered the command login using Admin credentials<\/p>\n
Note:<\/strong> use your tenant name in place of yourdomain.<\/p>\n
- In Session, select Use Conditional Access App control and choose Block Downloads (Preview) and click on select button. In Enable policy, click on the ON option and then click on create button to create the conditional access policy to block downloads in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Under conditions, choose the condition you want to use to block downloads of files in SharePoint Online and OneDrive.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n
- \n
- Now Click on Cloud apps or actions, then click on select app and choose Office 365 SharePoint Online. <\/strong>After that, click on the Select button to save changes.<\/li>\n<\/ul>\n
- A new window will open, asking for policy details.\n