How to Block File Downloads in SharePoint and OneDrive (What’s Possible, What Isn’t, and What Actually Works)
Blocking file downloads in SharePoint is one of those requests that sounds simple and turns complex very quickly.
It usually starts with a reasonable concern. Sensitive documents. External users. Unmanaged devices. A clear instruction from security or legal: ‘People should be able to read this, but they shouldn’t be able to download it.’
For years, the honest answer was uncomfortable. You could make downloads harder, but you couldn’t truly block them without workarounds, custom permission levels, or conditional access gymnastics. And even then, the guarantees were weak.
That changed with the introduction of the Block download policy for SharePoint and OneDrive, part of SharePoint Advanced Management. This is the first supported, platform‑level way to enforce browser‑only access to files, without redesigning your permission model or relying on unsupported UI tricks.

HANDS ON tek
M365 Admin




