One month down in 2025: How are your resolutions coming along? Check out how to get back on track here.
Forum Discussion
Provide Enterprise customers the ability to convert unmanaged accounts
Currently, Dropbox Enterprise admins have no way to retroactively identify and manage unmanaged accounts that exist within their verified domain. While domain verification and invite enforcement help with new accounts, existing unmanaged accounts remain a potential security risk, as former employees or unknown accounts may still have company data stored or shared publicly in violation of data agreements.
Suggested Enhancements:
- Provide an option in the Admin Console to export a list of unmanaged in-domain accounts for auditing and security review.
- Enable an admin-led account consolidation process, allowing enterprises to proactively manage or migrate content from inactive or legacy accounts.
- Offer an escalation path for Enterprise customers to verify domain ownership and reclaim unmanaged accounts where appropriate.
For example, in our case, we have 133 unmanaged, in-domain accounts that could be storing or sharing corporate content, but we have no visibility or path to consolidation. Adding these capabilities would improve security, governance, and compliance for Enterprise teams.
Would love to see this considered for a future update!
- Walter
Dropbox Staff
Hey MONOGrant - thanks for taking the time to share your thoughts on this with us.
Just to clarify something, are you familiar with the domain insights and account capture features?
Let us know if that would do the trick or if you had something else in mind.
Thanks!
Yes. We have already verified our domain, reviewed the number of unmanaged users, and confirmed our Capture Settings to All users: "All unmanaged users will be blocked from using Dropbox on all platforms and redirected to join your team or change their email."
However, this does not address the existing data within those accounts or any publicly shared content that may still be accessible.
We need a way to identify and consolidate unmanaged accounts under our control to ensure that all corporate user accounts are properly managed within our domain.
- Walter
Thanks for the clarification and taking the time to share your detailed feedback with us on this MONOGrant - much appreciated.
So, you're aware that you can force the accounts that use a verified domain to join the Dropbox team, assuming that there are available licenses, and then delete the users and transfer the content. Is that right?
If you'd like to achieve this in another way and when it comes your additional suggestions, note that it would be preferable to post them separately in our Ideas section using these tips, if needed.
Thanks again for sharing your thoughts!
