Blocking Creative Cloud file synchronisation

[tartogul]

According to a directive from our company's security officer we have to make sure that our users cannot upload any files to any cloud storage services.

I'm having some problems implementing this rule for the Creative Cloud service. If a user copies a file to the directory "%userprofile%\Creative Cloud Files" it then gets automatically uploaded to https://assets.adobe.com/files This is what I need to disable.

I did notice that if I go to the "Creative Cloud" application -> Settings -> Creative Cloud there is a checkbox there that allows to disable synchronisation. However even if we do that for every user there is nothing stopping them from just re-enabling the setting as soon as we stop looking. Ideally I'd like to set a group policy, registry key, ini-file setting or similar to permanently unset that checkbox and grey it out so it cannot be modified anymore.

Does something like that exist?

[Paul-M]

Have your tried blocking this?:

C:\Program Files (x86)\Adobe\Adobe Sync\CoreSync\CoreSync.exe

[Paul-M]

You may need to block the CC Library executable too?:

C:\Program Files (x86)\Common Files\Adobe\Creative Cloud Libraries\CCLibrary.exe

These are components you can individually remove with Adobe Creative Cloud Cleaner Tool - May not be the solution for your case, but an option.

[Abdullah5FE3]

@tartogul @Paul-M :
Have you found a solution?
I´m trying to do the same thing.

[kglad]

<moved from download&install>

[Abdullah5FE3]

What exactly do you mean?

[kglad]

@Abdullah5FE3 

i mean i moved this thread from the download&install forum to the enterprise&teams forum where it belongs.

are you the owner and/or admin of a teams or enterprise subscription?

[Generous_Charm16B8]

This can also be handled in your Admin Console - you can disable file sync and storage:

https://helpx.adobe.com/enterprise/using/manage-adobe-storage.html

https://helpx.adobe.com/enterprise/using/customize-creative-cloud-app.html

[Abdullah5FE3]

I have tried DisableFileSync:

The problem is that is works poorly. 
I can still upload files and it still syncronizes. 

I think that it only helps the first time experience

[Generous_Charm16B8]

Hi @Abdullah5FE3 the first link shows you how to manage storage. If you do not allocate storage to individuals they cannot sync. You can also contact Adobe Support directly via chat using the Support tab, they can walk you through the process step by step.

[Abdullah5FE3]

Regarding the first link - i´m reaching out our Adobe systemadmin.

Regarding Adobe support - they told us that they can´t help us out.

I just want to block the access to the Files ribbon and saving/sync files to the Cloud.

[SuJoshi]

@Abdullah5FE3  If the users are using any Acrobat, then you can disable the PDF service from the admin console (for enterprise license) which will restrict the users to access any online services including uploading the files over the cloud.

For the Creative Cloud users, you can create a managed package from the admin console and disable the files syncing, however, if the users are using the Named User license, the nature of the license would allow them to upload the files by going to the cloud portal and outside the organization.

It depends on the organization's policy, you can either use SSO and allow them to use the account within the organization, block all the Adobe network endpoints related to library and sync services and set the restrictions on the browser, or contact your Reseller/Account Manager and explore other licensing options as per your requirements.

[Abdullah5FE3]

@SuJoshi : I already work with a managed package that has diable the files syncing and all Users have a named user license. In our company we already use the login via SSO (Federated-ID). I poorly dont know all the Adobe network endpoints that has to be disabled for the services. 

https://helpx.adobe.com/de/enterprise/kb/network-endpoints.html

I cant find the right ones.

[SuJoshi]

Kindly check the article again and the endpoints for sync and libraries are documented,

If the users are able to access the accounts/federated ID outside the organization then I do not see any point in setting up the restrictions as it will be within org devices.

You can also disable the following websites:

https://assets.adobe.com/

https://acrobat.adobe.com/link/home/

https://lightroom.adobe.com/

[Abdullah5FE3]

Yeah but the article says that all applications are effected. Not only the Creative Cloud application, as wished.

The users in our company, shouldnt be allowed to login with a account that is not a federated id..

If i disable the three links, that you have provided, will it effect the other Creative Cloud products such as Photoshop, Illustrator etc.?

If i disable lightroom.adobe.com will the desctop application of it still work?