OneDrive Administrators Guide

Understanding OneDrive Administration

OneDrive administration can seem complex at first glance, but understanding its architecture and how it integrates with SharePoint makes managing your organisation's cloud storage straightforward and efficient. This comprehensive guide walks you through the key admin functions, settings, and best practices you need to know.

OneDrive Framework: The SharePoint Connection

One of the most important things to understand about OneDrive administration is that each provisioned OneDrive account is fundamentally its own SharePoint site. OneDrive uses SharePoint as its backend infrastructure, with the OneDrive application layered on top of SharePoint. This architecture has significant implications for how you manage and administer OneDrive across your organisation.

Because each user's OneDrive is essentially a SharePoint site, centralised admin settings for OneDrive are located within the SharePoint Admin Center rather than a separate OneDrive admin portal. It is not the easiest to locate hence many admins struggle to find the settings to administer OneDrive, tenant-wide settings for OneDrive are stored in the same admin portal as SharePoint, creating a unified administration experience.

Furthermore, whilst tenant-wide settings are managed centrally, each user's individual OneDrive has its own SharePoint site settings behind the OneDrive web application, this is where the administration settings for each One Drive account exist. This dual-layer approach gives administrators both global control and granular, per-user customisation capabilities.

Accessing Individual User OneDrive Profiles

To analyse or manage a specific user's OneDrive profile, you can obtain temporary admin access through the Microsoft 365 Admin Center. This is particularly useful for troubleshooting, data recovery, or auditing purposes.

When you access another user's OneDrive using this method, permissions are granted to your admin account at the Site Collection Administrators level. This gives you full control over that user's personal SharePoint site (which backs their OneDrive), allowing you to manage files, recover deleted content, and make necessary changes.

Accessing Detailed OneDrive SharePoint Settings

For more granular control over individual OneDrive configurations, you can access the backend SharePoint site settings for any user's OneDrive. This is where you can view and modify bespoke permissions and site-specific configurations.

The OneDrive Settings menu provides access to detailed SharePoint site configuration options.

SharePoint site settings allow granular control over individual OneDrive configurations.

Central OneDrive Admin Settings

For organisation-wide OneDrive management, the admin centre sits within the SharePoint Admin Center. These global settings apply across all OneDrive profiles within your organisation.

The SharePoint Admin Center houses all central OneDrive configuration options.

Access Control Settings

The Access Control Settings page provides administrators with policies that enhance security and control how users access SharePoint and OneDrive. These settings include:

• Idle Session Logouts: Automatically log out users after a period of inactivity to protect unattended sessions
• Managed Device Restrictions: Allow access only from devices enrolled in your mobile device management (MDM) solution
• IP Address Restrictions: Limit access to defined IP address ranges, useful for office-based or VPN-only access
• Legacy Office App Blocking: Block access through older versions of Office Apps that cannot enforce device-based restrictions

Note that some of these settings require specific licensing, such as Enterprise Mobility + Security, for features like device compliance checking or domain join requirements.

Access Control Settings allow you to implement security policies across OneDrive and SharePoint.

OneDrive Retention, Storage Limits, and Sync Settings

These critical settings govern data preservation, capacity allocation, and synchronisation behaviour across your organisation.

Best Practices for OneDrive Administration

As you manage OneDrive across your organisation, keep these best practices in mind:

• Regularly audit access: Periodically review who has Site Collection Administrator access to individual OneDrives
• Implement retention policies: Establish clear data retention policies to protect against accidental deletion and meet compliance requirements
• Monitor storage usage: Keep an eye on storage consumption trends to plan capacity and optimise costs
• Enforce security settings: Take advantage of Access Control policies to ensure users access OneDrive from compliant devices and secure locations
• Document configurations: Keep records of any custom settings applied to individual OneDrives for troubleshooting and compliance purposes

Getting Help with OneDrive Management

OneDrive administration involves balancing security, storage management, and user productivity. If you're managing a large organisation or implementing complex policies, expert guidance can save time and prevent costly mistakes.

AT Technical specialises in helping organisations optimise their SharePoint and OneDrive environments. Whether you need to audit your current setup, implement new governance policies, or troubleshoot complex scenarios, our team can help.