Earlier in this chapter, we reviewed the synchronization settings that are available inside Group Policy for the OneDrive for Business client. With one of the security settings (Allow syncing OneDrive accounts for only specific organizations), you can enter tenant IDs for the SharePoint Online tenants that you want to either allow or block from syncing with a client.

From the OneDrive for Business Admin Center, you can control which clients you want to enable synchronization for (the inverse of the Group Policy settings). This can be seen in the following screenshot:

These settings are as follows:

• Show the Sync button on the OneDrive website: This determines whether or not the Sync button is displayed when viewing the OneDrive for Business site in a browser. Clicking this button triggers the Sync client on the computer and launches it.
• Allow syncing only on PCs joined to specific domains: Use this option to restrict synchronization to computers that are joined to specific domains. Computers that are joined to other domains or workgroups will not be allowed to synchronize. When specifying domains, you need to specify the domain GUID (which you can obtain via Get-ADDomain -DomainName <domain> | Select ObjectGuid). Enter one domain GUID per line.
• Block syncing of specific file types: This option can be used to block the synchronization of file types based on their extension. Enter one extension per line.

Now that we've configured and managed One Drive for Business, let's troubleshoot a few scenarios.