Data Protection Issues

How to Prevent OneDrive File Sharing Through Zoom using Microsoft Intune

Aamir Naveed Akram Oct 10, 2026 870 views

Question details

Administrators want to know how to restrict employees from sharing organizational OneDrive files during Zoom meetings using Microsoft Intune or data loss prevention (DLP) policies.

How to Prevent OneDrive File Sharing Through Zoom using Microsoft Intune

Product: Microsoft Intune, OneDrive
Device & OS: not provided
Scenario: An organization needs to prevent unauthorized data sharing of sensitive OneDrive files through third-party communication applications like Zoom.
Observed behavior: Standard Intune and OneDrive policies do not directly control or block content sharing within third-party apps like Zoom, leaving a potential gap in data protection.

Before you start

Ensure you have global administrator or Intune administrator privileges in your Microsoft 365 tenant to modify data loss prevention (DLP) policies and app protection settings.

Solution 1Recommended

Restrict Allowed Collaboration Apps and Adjust OneDrive External Sharing

Since Intune cannot directly control native file sharing within the Zoom app, the best approach is to restrict corporate collaboration to managed apps like Teams and tighten OneDrive's external sharing rules.

Microsoft Intune App Protection Policies (MAM) excel at preventing data movement between managed and unmanaged apps on mobile devices, but they have limitations on desktop endpoints regarding third-party apps like Zoom.

To effectively secure your data, you should restrict external sharing at the SharePoint/OneDrive administrative level, ensuring that even if a link is shared in Zoom, unauthorized external users cannot open it.

Access the SharePoint Admin Center

Sign in to the Microsoft 365 Admin Center, navigate to the SharePoint admin center, expand the 'Policies' menu on the left pane, and select 'Sharing'.

Reduce External Sharing Permissions

Under the OneDrive external sharing section, lower the slider to 'New and existing guests' or 'Only people in your organization'. This ensures external Zoom participants cannot access files via shared links.

Implement Intune App Protection Policies

In the Microsoft Intune admin center, go to 'Apps' > 'App protection policies'. Create a policy that restricts 'Send org data to other apps' to 'Policy managed apps' only, which blocks data transfer to unmanaged apps like Zoom on mobile devices.

Restrict Allowed Collaboration Apps and Adjust OneDrive External Sharing

App Management Limitation: While these settings secure the files themselves, standard Intune policies cannot prevent a user from using the 'Share Screen' feature in Zoom to display a document that is currently open on their desktop.

Solution 2

Use Microsoft Defender for Cloud Apps to Monitor and Block

Deploy Microsoft Defender for Cloud Apps to enforce session controls and monitor third-party application activities.

Free Microsoft Office alternative

Secure and Manage Your Documents with WPS Office

While managing complex Intune and DLP policies for Microsoft 365 can be challenging and costly, WPS Office provides a lightweight, highly compatible alternative for your daily document processing needs. Enjoy robust local file encryption and a familiar interface without the heavy administrative overhead.

1. Download and Install: Visit the official WPS Office website to download the free installer for Windows, Mac, or Linux.
2. Open Existing Microsoft Formats: Simply double-click your existing Word, Excel, or PowerPoint files to open and edit them seamlessly in WPS Office.
3. Apply Document Passwords: To secure your files before sharing, go to 'Menu' > 'Document Encryption' and set a password to restrict unauthorized access.

Fully compatible with Microsoft Office formats (.docx, .xlsx, .pptx)Lightweight architecture ensuring fast loading speeds on any deviceBuilt-in document encryption and password protection featuresFamiliar user interface for seamless migration from Microsoft OfficeCost-effective solution with powerful offline editing capabilities

microsoft office alternative - wps office

Frequently Asked Questions

Can Microsoft Intune completely block screen sharing in Zoom?

No, Intune App Protection Policies cannot prevent a user from sharing their screen in desktop or web versions of third-party applications like Zoom. To prevent screen sharing, you would need to use robust Endpoint DLP or specific Zoom administrative controls.

How do DLP policies interact with third-party apps like Zoom?

Microsoft Endpoint DLP can prevent copying files to unapproved network shares or USB drives, but it has limited visibility into files shared directly through third-party chat clients unless those apps are specifically integrated via Microsoft Defender for Cloud Apps.

Is it possible to block Zoom usage entirely on corporate devices?

Yes, you can use Microsoft Intune Endpoint Security (Attack Surface Reduction rules) or Microsoft Defender for Endpoint to block the Zoom executable or block access to Zoom's network domains, effectively forcing users to use approved apps like Microsoft Teams.

Microsoft Office Security Issues