How to prevent ransomware encrypted files to sync to OneDrive for Business – Mobile-First Cloud-First
On premise we can use File Server Resource Manager (FSRM) component File Screening Management that is a part of Windows Server operation system.
But when we are moving to the cloud we also need to do something – and this is one way. Many companies are using OneDrive for Business and then we can prevent the encrypted files to be synced to OneDrive for Business with a minimal admin effort and a low user impact.
This is an example of a site that have a updated list of file extensions used by ransomware:
![Windows-Hello-For-Business-Active-Directory[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/Windows-Hello-For-Business-Active-Directory1-1024x576-65x65.png "Windows-Hello-For-Business-Active-Directory[1]")
![B-Intune-Graphic[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/B-Intune-Graphic1-1024x603-65x65.png "B-Intune-Graphic[1]")
![wp-1593849019379[1]](https://maciejrebisz.com/wp-content/uploads/2025/08/wp-15938490193791-65x65.jpg "wp-1593849019379[1]")