How to Fix OneDrive and SharePoint Blocked by Organizational Policy
Question details
Administrators and users are unable to access OneDrive for Business or the SharePoint admin center due to a network location or organizational policy block.
- Product
- OneDrive and SharePoint
- Device & OS
- not provided
- Scenario
- Attempting to access SharePoint admin centers or OneDrive files over a network.
- Observed behavior
- An error message is displayed stating that access is denied because of organizational policies or the network location.
Ensure you have Global Administrator or SharePoint Administrator privileges in your Microsoft 365 tenant, as modifying conditional access policies requires elevated permissions.
Review and Modify Conditional Access Policies
Identify and adjust the specific Azure AD Conditional Access policy that is incorrectly blocking user and administrator access.
Conditional Access policies in Azure Active Directory are often used to restrict access based on IP address, location, or device compliance. If misconfigured, they can accidentally lock out legitimate users.
Go to the Azure portal (portal.azure.com) and sign in using your global administrator credentials.
Search for and select 'Azure Active Directory', then click on 'Security' from the left menu, and select 'Conditional Access'.
Check the Azure AD sign-in logs to pinpoint exactly which conditional access rule or policy is causing the 'access denied' error for the affected users.
Click on the problematic policy to open its settings. Adjust the network location conditions to exclude your current IP, or temporarily toggle the 'Enable policy' switch to 'Off' and save your changes.
Ask the affected users or administrators to open a new browser session and attempt to access OneDrive for Business or SharePoint again.
Check SharePoint Location-Based Policies
Verify if SharePoint's internal access control settings are restricting access based on specific IP address ranges.
Manage Your Documents Effectively with WPS Office
While you wait for your IT administrator to resolve SharePoint and OneDrive access policies, you can continue working on your local documents smoothly. WPS Office is a free, lightweight, and highly compatible alternative to Microsoft Office, allowing you to edit Word, Excel, and PowerPoint files without interruptions.
- 1. Download and Install: Visit the official WPS website to download the free WPS Office suite and follow the installation prompts.
- 2. Open Your Documents: Launch WPS Office and open your existing Word, Excel, or PowerPoint files directly from your local drive.
- 3. Edit and Save: Edit your documents using the familiar interface and save them in standard Microsoft formats to ensure compatibility.
Frequently Asked Questions
Why am I getting an 'access denied by organizational policy' error?
This error occurs when your organization's IT administrator has set up a Conditional Access policy or a location-based restriction in Azure AD or SharePoint that prevents access from your current network, IP address, or device.
Can a standard user fix the conditional access block?
No, standard users cannot change organizational policies. You must contact your Microsoft 365 global administrator or IT support team to review the sign-in logs and adjust the policies.
How long does it take for a conditional access policy change to take effect?
Policy changes in Azure Active Directory typically take effect within a few minutes, but it can sometimes take up to 24 hours for access tokens to refresh completely across all Microsoft 365 services like SharePoint and OneDrive.
