CCE-44160-0Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Disable: 'Prevent the usage of OneDrive for file storage'
This policy setting lets you prevent apps and features from working with files on OneDrive.
If you enable this policy setting:
* Users can't access OneDrive from the OneDrive app and file picker.
* Windows Store apps can't access OneDrive using the WinRT API.
* OneDrive doesn't appear in the navigation pane in File Explorer.
* OneDrive files aren't kept in sync with the cloud.
* Users can't automatically upload photos and videos from the camera roll folder.
If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Apps and features will be prevented from working with files on OneDrive.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsOneDrivePrevent the usage of OneDrive for file storage
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsOneDriveDisableFileSyncNGSC
CCSS Severity: | CCSS Metrics: |
CCSS Score : 7.0 | Attack Vector: NETWORK |
Exploit Score: 2.2 | Attack Complexity: HIGH |
Impact Score: 4.7 | Privileges Required: NONE |
Severity: HIGH | User Interaction: NONE |
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: LOW |
| Availability: LOW |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35395 |