OneDrive for Business

This solution is a core part of the Office 365 platform and provides a cloud storage and sharing solution. There are several options available to ensure that data is protect. For example, allowing users to only synchronize their OneDrive folders on authorized devices, if the device is not domain joined or compliant (for example, enrolled with Intune MDM), then the user will only be able to gain access to the content via a browser. Controls can also be set to control the ability for the user to share their content from OneDrive to internal or external third-parties.

This screenshot shows the available sync configuration options within Office 365:

It is also possible to govern access based on device specifics, such as the ability to restrict access based on the IP address and support for modern authentication. If the mobile application management section is grayed out (as per the following image), then settings are being controlled by Microsoft Intune instead: