A company allows their users to access OneDrive on their managed laptops.

Create DLP policies to block the upload of all the identified documents.

Create DLP policies to allow document uploading only to the corporate OneDrive instance.

Create a new application instance for the corporate OneDrive.

Fingerprint all the documents to have a catalog of all the documents that the company needs to protect.