Restrict Google Drive for desktop to company owned devices, now generally available

Quick launch summary 

You can now restrict the use of Google Drive for desktop to company owned devices. This functionality was previously available in beta

Drive for desktop (formerly known as Drive File Stream) is a simple and efficient way for users to access Drive data on Windows and Mac devices. This launch more fully integrates it with Google endpoint management, and enables admins to restrict use to company-owned devices only. This helps admins to ensure users can access the files they need safely and efficiently whether they’re online or offline, while helping to protect corporate data on devices. 

Getting started 

  • Admins: This feature will be off by default. To turn it on for your organization or specific OUs, go to Admin console > Apps > Google Workspace > Drive and Docs > Features and Applications. Visit our Help Center to learn more about using Drive for desktop with Google endpoint management
  • End users: No end user impact unless configured by an administrator. If personal (not company-owned) devices already have Drive for desktop when the admin restricts usage for your account, devices will lose access after they're restarted or Drive for desktop checks the device's compliance (a maximum of 3 hours), whichever comes first. 

Rollout pace 

  • This feature is available now for all users. 


  • Available to Google Workspace Business Plus, Enterprise Standard, and Enterprise Plus, Education, Enterprise for Education, and Frontline, as well as G Suite Basic and Business customers. 
  • Not available to Google Workspace Essentials, Business Starter, Business Standard, and Enterprise Essentials, and Nonprofits customers.