Description:
Verifies that the OneDrive sync client is restricted to devices joined to approved Active Directory domains, so organizational content cannot be synchronized to unmanaged computers.
Why:
OneDrive sync is restricted to computers joined to approved Active Directory domains, preventing unmanaged devices from syncing organisational data.
Configured: OneDrive sync is restricted to AD-domain-joined computers.
Not Configured: OneDrive sync is not restricted to AD-domain-joined computers.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: General
Microsoft Licensing: Works with Basic licensing
Secure Score Impact: Not verified. No Microsoft Secure Score control could be confirmed for this setting from published sources. See the note in README.md before publishing this field.
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 2) — 7.3.2
Microsoft documentation: