Control file sharing

Hello,

For security reasons, we would like to control file transfer being enabled only for the ITsupport team.

Can this be achieved? What kind of license does it required?

From what I was able to gather, file transfer can be blocked from the app options. but the user is able to access it and it can be easily enabled back.

Is there a registry key that can block it/policy? Can this be achieved using the intune integration?