The error “Your administrator has disabled Google Drive for Desktop” occurs when you attempt to sign in to the desktop sync client using a Google Workspace account that lacks organizational authorization. When this policy is active, Google’s authentication servers immediately revoke the desktop client’s OAuth tokens, disconnect the synchronization engine, and unmount the virtual drive, even while your web browser access to drive.google.com remains fully functional.
Fast Fix
This block is an organizational policy enforced in the Google Admin Console, not a local computer fault. A Google Workspace Administrator must navigate to Apps > Google Workspace > Drive and Docs > Features and Applications > Google Drive for Desktop and select “Allow Google Drive for Desktop” for your Organizational Unit (OU). End users can access files via drive.google.com in the interim.
Diagnostic Snapshot
| Parameter | Specification |
|---|---|
| Target Application | Google Drive for Desktop (Windows & macOS) |
| Primary Symptom | Login flow redirects to a block screen stating Drive for Desktop is disabled; client displays “Account disconnected” |
| Failure Domain | Google Workspace Identity & Access Policy (Admin Console) |
| Cloud Storage Impact | None: Cloud files, Shared Drives, and browser access remain completely intact |
| Admin Access Required | Yes (Super Admin or delegated administrator with Drive Service Management privileges) |
Resolution Steps
For End Users: Immediate Workarounds
If you are an end user without administrator access:
- Use Google Drive Web: Navigate to
https://drive.google.comin your browser. All cloud documents, Shared Drives, and search tools remain fully accessible. - Install the Google Drive Progressive Web App (PWA): Open Chrome or Edge, go to
drive.google.com, click the Install icon in the address bar (or menu > Save and share > Install Google Drive). This provides a standalone app-like desktop window without requiring local filesystem sync drivers. - Contact Your IT Helpdesk: Provide your IT department with your exact email address, your computer’s hostname/serial number, and confirm whether you are working on a company-managed device or personal hardware.
For Google Workspace Administrators: Enabling Access
To enable Drive for Desktop across the domain or for a specific Organizational Unit:
- Sign in to the Google Admin Console (
admin.google.com) with Super Admin or Delegated Admin credentials. - Navigate to Apps > Google Workspace > Drive and Docs.
- Click Features and Applications.
- In the left panel, select the target Organizational Unit (OU) where the user resides (e.g.,
Corporate / Engineering). - Click Google Drive for Desktop.
- Check the box for “Allow Google Drive for Desktop”.
- If company policy permits access on personal machines, ensure “Only allow Google Drive for Desktop on authorized devices” is unchecked, or ensure the user’s machine is properly enrolled in Google Endpoint Management.
- Click Save (or Override if modifying an inherited sub-OU).
Google Admin Console
└── Apps > Google Workspace > Drive and Docs
└── Features and Applications
└── Google Drive for Desktop
├── [✓] Allow Google Drive for Desktop
└── [ ] Only allow Google Drive for Desktop on authorized devices (uncheck for BYOD)
Note on Policy Propagation: Policy updates made in the Google Admin Console typically take a few minutes, but can take up to 24 hours to propagate across all global Google authentication nodes.
Hard Stops
- Third-Party Sync Wrappers on Restricted Domains: If Google Workspace administrators have intentionally disabled Drive for Desktop for compliance or data-loss prevention (DLP) reasons (e.g., preventing offline exfiltration of sensitive records), do not attempt to bypass this policy by using third-party sync utilities, unauthorized API scripts, or mounting tools. Doing so can trigger automated security alerts and policy violations in Google Admin audit logs. Work through official IT channels to request an authorized policy exemption.