In the Onedrive4Business Admin Portal you can define which user that are part of a certain AD Domain are allowed to sync.
You need to get the AD GUID’s first using the PowerShell Get-ADDomain Cmdlet.
See here on how to.
Enter the GUID’s and save it.
And choose to Block MAC devices if needed.