How to Enable Block Download Policy for SharePoint Sites and OneDrive

Hanna Korotka
2 hours ago
2 min read

Small and midsize businesses face a growing challenge: employees and vendors increasingly access files from different locations, browsers, and devices. While collaboration is essential, unrestricted file downloads dramatically increase the risk of accidental exposure or data leakage.

Microsoft offers a built‑in safeguard to reduce those risks: the block download policy. This SharePoint and OneDrive feature prevents users from downloading, printing, or syncing files from selected sites. It’s a powerful yet simple way to enforce view‑only access while keeping your data in the cloud.

What the Block Download Policy Does

When applied to a SharePoint site or OneDrive:

Users can view files in the browser
Users cannot download files
Users cannot print files
Users cannot sync files using OneDrive sync client

This setting is ideal for:

HR sites
Financial documents
M&A or executive content
Vendor‑facing sites
Temporary project areas with sensitive data

It is a simple but highly effective data‑control measure.

Prerequisites and Requirements

You must be a SharePoint Administrator or Global Administrator
Install the latest version of SharePoint Online Management Shell. Download link: https://learn.microsoft.com/en-us/powershell/sharepoint/sharepoint-online/connect-sharepoint-online

How to Enable Block Download Policy for a SharePoint Site (PowerShell)

Connect to SharePoint Online:

Connect-SPOService -Url https://yourtenant-admin.sharepoint.com

Enable Block Download Policy for a Specific Site. Replace the URL with the site you want to protect:

Set-SPOSite -Identity <SiteURL> -BlockDownloadPolicy $true

What Happens After You Enable It

Users will:

See a banner stating downloads are blocked
Lose the Download button
Lose the Sync button
Be unable to print documents
Be unable to access the site via desktop Office apps

Disable the Block Download Policy

To revert the configuration:

Set-SPOSite -Identity <SiteURL> -BlockDownloadPolicy $false

How to Apply Block Download Policy to OneDrive

Microsoft uses the same concept for OneDrive, and the behavior is identical — browser‑only access with downloads disabled.

The configuration uses the same PowerShell parameter on the user's OneDrive site.

Set-SPOSite -Identity <OneDriveURL> -BlockDownloadPolicy $false

Why This Matters for SMB IT Environments

Enforcing strict download controls is a crucial layer of data governance. This policy delivers:

Reduced risk of data exfiltration
Safer collaboration with external vendors
Protection of regulated content (finance, HR, legal)
No impact on productivity — users still collaborate online

One configuration change can significantly lower your organization’s data exposure risk.

If your organization needs expert guidance implementing SharePoint security controls or hardening Microsoft 365 against data‑leak risks, our team can help you deploy these configurations quickly and correctly while aligning them with your existing governance and compliance requirements. We specialize in strengthening Microsoft cloud environments for SMBs and can support you through planning, configuration, and long‑term security management.

Book a Meeting with Us