How to Restrict Downloads and Link Sharing in Google Drive

To restrict downloads in Google Drive, open a file’s Share dialog, click the settings gear, and turn off “Viewers and commenters can see the option to download, print, and copy.” To rein in link sharing, set General access to Restricted so only named people can open the file. Admins can go further and control external sharing for the whole organization from the Admin console. Here is each control, from a single file up to a domain-wide policy.

The default worth knowing: unless you change it, viewers and commenters can download, print, and copy a file. So “view only” does not mean “cannot take a copy” until you turn that option off.

Which control should I use?

Match the control to what you are trying to stop.

Goal	Use this control
Stop casual downloads and copies	Turn off download, print, and copy for Viewers and Commenters
Stop a link from spreading	Set General access to Restricted
Stop Editors resharing	Turn off Editor permission changes and sharing
Limit internal link sharing	Use target audiences
Restrict external sharing broadly	Admin console sharing settings
Control shared-drive downloads	Shared-drive restrictions

Restrict downloading, printing, and copying on a file

1. Right-click the file and choose Share, or open it and click Share.
2. Click the settings gear in the top right of the Share dialog.
3. Turn off “Viewers and commenters can see the option to download, print, and copy.” (Google Drive Help)

[SCREENSHOT: Share dialog settings gear with the download/print/copy checkbox for viewers and commenters – SOURCE: Google Drive UI (we capture)]

Two things to know. In the standard file-sharing settings, this control is mainly for Viewers and Commenters. Editors have broader abilities, so if sensitive content needs stronger protection, also restrict Editor resharing and consider shared-drive restrictions, DLP, or other admin controls. And it reduces casual copying rather than guaranteeing content can never be captured. For stronger controls on sensitive content, Workspace admins can also use DLP rules to apply information-rights restrictions (Google Admin Help, “Use DLP for Drive”).

Also restrict Editors from resharing

The same Share settings panel has a second useful control. Owners can turn off the option that lets Editors change permissions and share the file (Google Drive Help). Use this for sensitive files where collaborators need to edit but should not be able to widen access by adding new people or changing the link.

Rein in link sharing on a file

Under General access at the bottom of the Share dialog, choose Restricted so only the people you have named can open the file. If your organization allows it, “Anyone with the link” works for anyone who receives it. Switching back to Restricted removes link-based access, but named people, groups, inherited folder access, or shared-drive membership may still let someone open the file, so review those separately (Google Drive Help).

Set organization-wide limits (admin)

Individual settings are fine for one file, but admins can set the guardrails for everyone. In the Admin console under Apps, then Google Workspace, then Drive and Docs, sharing settings let you control whether people can share outside the organization at all, warn users before they share externally, or block external link sharing entirely (Google Admin Help, “Manage external sharing”).

You can also narrow who link sharing reaches by creating target audiences, which are lists of groups or users, such as a specific department, that replace the broad “anyone in your organization” option when people share (Google Admin Help, “About target audiences”). That keeps “share with the link” from silently meaning “share with the entire company.”

One thing to plan for: admin sharing-setting changes can take up to 24 hours to apply, and during that window the old and new settings may both be intermittently enforced (Google Admin Help). Make policy changes ahead of when you need them in force.

[SCREENSHOT: Admin console Drive and Docs sharing settings showing external sharing controls – SOURCE: Google Admin UI (we capture)]

Restrict downloads in shared drives

Shared drives have their own layer. In a shared drive, Managers and Workspace admins can apply restrictions that prevent Content managers, Contributors, Commenters, and Viewers from downloading, copying, or printing files, and these restrictions override normal file and folder sharing (Google Workspace Learning Center). For the full breakdown of shared drive roles, see our shared drive permissions guide.

Where people slip up

• Assuming view-only blocks downloads. It does not, until you turn off download, print, and copy for viewers and commenters.
• Leaving links live. A forwarded “anyone with the link” URL keeps working until you set the file back to Restricted.
• Fixing files one by one. Individual settings do not scale; organization policy and bulk cleanup do.

FAQ

How do I stop people from downloading a Google Drive file?
Open the Share dialog, click the settings gear, and turn off “Viewers and commenters can see the option to download, print, and copy.” Note it does not apply to Editors (Google Drive Help).

How do I turn off link sharing?
In the Share dialog, set General access to Restricted. That removes link-based access, though named people, groups, inherited folder access, or shared-drive membership can still allow someone in, so review those too (Google Drive Help).

Can I stop downloads for the whole organization?
There are three layers. For ordinary My Drive files, owners usually manage download, print, and copy restrictions file by file. For shared drives, Managers and Workspace admins can apply shared-drive restrictions that cover Content managers, Contributors, Commenters, and Viewers (Google Workspace Learning Center). For sensitive data, admins may also use DLP rules to enforce download, copy, and print restrictions (Google Admin Help). Admins separately control external sharing organization-wide in the Admin console (Google Admin Help).

What are target audiences?
Lists of groups or users an admin defines, so that link sharing can be limited to a specific team instead of everyone in the organization (Google Admin Help).

Does restricting download stop editors too?
In the standard file setting, no. That control covers Viewers and Commenters, and Editors have broader abilities. To limit Editors, turn off their permission-changing and resharing, and for sensitive content use shared-drive restrictions or DLP rules (Google Drive Help; Use DLP for Drive).

Control sharing across every file

Turning off downloads and tightening links one file at a time does not scale across a domain. Patronum gives admins domain-wide visibility of file access and supports bulk remediation of oversharing, so you can enforce sharing limits everywhere at once. For the roles behind these settings, see our Google Drive permissions explainer.

Sources

• Google Drive Help, “Share files from Google Drive”: https://support.google.com/drive/answer/2494822
• Google Admin Help, “Manage external sharing for your organization”: https://support.google.com/a/answer/60781
• Google Admin Help, “About target audiences”: https://support.google.com/a/answer/9934697
• Google Workspace Learning Center, “How file access works in shared drives” (shared-drive restrictions): https://support.google.com/a/users/answer/12380484
• Google Admin Help, “Use DLP for Drive to prevent data loss”: https://support.google.com/a/answer/9646351