Is there a way to allow specific users web-access only and prevent them from using sync-clients?
I think it is not a good idea and i also think it does not work good. Nextcloud uses WebDAV and the user can use different client-software (file explorer, …)
Read: