Users must be prevented from configuring personal OneDrive accounts.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-71331	DTOO604	SV-85955r2_rule		Medium

Description
This policy setting allows you to prevent users from configuring a personal OneDrive account on the machine. If users had previously added a personal OneDrive account to the machine they will be shown an error the next time that they start the client.

STIG	Date
Microsoft OneDrive for Business 2016 Security Technical Implementation Guide	2017-01-23

Details

Check Text ( C-71731r2_chk )
Verify the policy value for User Configuration -> Administrative Templates -> OneDrive -> "Prevent users from configuring personal OneDrive accounts" is set to "Enabled". Procedure: Use the Windows Registry Editor to navigate to the following key: HKCU\SOFTWARE\Microsoft\OneDrive Criteria: If the value DisablePersonalSync is REG_DWORD = 1, this is not a finding.

Fix Text (F-77643r2_fix)
Set the policy value for User Configuration -> Administrative Templates -> OneDrive -> "Prevent users from configuring personal OneDrive acccounts" to "Enabled".