CCE-25900-2| Platform: cpe:/o:microsoft:windows_server_2012:- | Date: (C)2022-08-12 (M)2023-07-04 |
This policy setting lets you prevent apps and features from working with files on OneDrive.
If you enable this policy setting:
* Users can?t access OneDrive from the OneDrive app and file picker.
* Windows Store apps can?t access OneDrive using the WinRT API.
* OneDrive doesn?t appear in the navigation pane in File Explorer.
* OneDrive files aren?t kept in sync with the cloud.
* Users can?t automatically upload photos and videos from the camera roll folder.
If you disable or do not configure this policy setting, apps and features can work with OneDrive file storage.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\OneDrive!Prevent the usage of OneDrive for file storage
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Skydrive!DisableFileSync
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 8.8 | Attack Vector: NETWORK |
| Exploit Score: 2.8 | Attack Complexity: LOW |
| Impact Score: 5.9 | Privileges Required: LOW |
| Severity: HIGH | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| | Confidentiality: HIGH |
| | Integrity: HIGH |
| | Availability: HIGH |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:82807 |
