Silently move Windows known folders to Onedrive using Intune

Windows Known folders are Desktop, Documents, and Pictures, created by default for each user. Re-directing these folders to Onedrive provides two advantages:

  1. When you move/re-direct Windows Known folders to OneDrive, the data stored in those folders is automatically backed up.
  2. There has been no change in the way users work on these folders.
  3. If a user changes his device, Windows known folders will sync back to the new device, and the users will have a seamless experience across devices.

Intune Policies for Moving Known Folders to OneDrive

To Configure Known Folders Move to OneDrive using Intune, Configure below three settings:

  1. Prompt users to move Windows known folders to OneDrive – This setting prompts users to move their Windows known folders.
  2. Silently move Windows-known folders to OneDrive – This will redirect/move known folders without any user Interaction. If moving the known folders silently fails, users will be prompted to fix the issue and continue. This prompt occurs because of the settings: “Prompt users to move Windows known folders to OneDrive“.
  3. Prevent users from redirecting their Windows known folders to their PC
    This setting forces users to keep their Documents, Pictures, and Desktop folders re-directed to OneDrive.

Create Device Configuration Profile

  • Sign in to the Intune admin center.
  • Click on Devices Configuration Create > New Policy.
  • Select Platform: Windows 10 and later.
  • Profile type: Settings Catalog.
  • Click Create.

Basics

  • Name: Onedrive KFM Policy
  • Description: Provide a useful description.

Configuration

  • Click on + Add settings and Find OneDrive category.
Select Onedrive from settings picker
Select Onedrive from the settings picker
  • Locate the following Three Policies and Enable them Using the Toggle Switch.
    • Prompt users to move Windows-known folders to OneDrive.
    • Silently move Windows-known folders to OneDrive.
    • Prevent users from redirecting their Windows-known folders to their PC.

To configure these policies, you’ll need your Tenant ID. To obtain your Tenant ID, go to the Entra ID admin center > Identity > Overview.

Tenant ID
Onedrive known folder move settings on Intune
Onedrive known folder move settings on Intune

Assignments

Select Add groups and opt for an Entra security group containing Windows 10/11 devices or Entra ID users. Adding devices to the group and targeting them is recommended for a controlled deployment. Once testing proves successful, you can expand the deployment by including additional devices in the group.

Assign Onedrive known folder move policy to devices
Assign Onedrive known folder move policy to devices

Review + Create

Review the deployment and click on Create to start the deployment process.

End-user Experience

Now, let’s inspect one of the user devices to verify if our configuration profile has been successfully applied.

Windows known folder redirection to Onedrive
Windows known folder redirection to Onedrive
Your IT department wants you to back up your folders
Your IT department wants you to back up your folders
Your IT department wants you to back up your Important folders
Your IT department wants you to back up your important folders

FAQs

1. Where is the Tenant ID stored in the Registry for OneDrive?

The Tenant ID is stored in the Windows Registry at HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive, specifically within the KFMOptInWithWizard registry entry.

KFMOptInWithWizard registry entry
KFMOptInWithWizard registry entry
  • Use OneDrive Files On-Demand – Enabling this setting doesn’t download all the content stored on your OneDrive online to your device. Instead, it creates a file and folder structure. When you attempt to open a file, it will be downloaded on demand.

3. Full List of OneDrive Policies available in Intune Settings Catalog

When writing this blog post, approximately 40 settings were in the OneDrive folder of the Settings Catalog within the Intune Device Configuration Profile. Microsoft documentation provides more detailed information about each policy.

  1. Allow OneDrive to disable Windows permission inheritance in folders synced read-only
  2. Allow syncing OneDrive accounts for only specific organizations
  3. Allow users to choose how to handle Office file sync conflicts (User)
  4. Always use the user’s Windows display language when provisioning known folders in OneDrive
  5. Always use the user’s Windows display language when provisioning known folders in OneDrive (User)
  6. Block file downloads when users are low on disk space
  7. Block syncing OneDrive accounts for specific organizations
  8. Cause sync client to ignore normal web proxy detection logic
  9. Coauthor and share in Office desktop apps (User)
  10. Configure team site libraries to sync automatically
  11. Configure team site libraries to sync automatically (User)
  12. Continue syncing on metered networks (User)
  13. Continue syncing when devices have battery saver mode turned on (User)
  14. Convert synced team site files to online-only files
  15. Disable the tutorial that appears at the end of OneDrive Setup (User)
  16. Enable automatic upload bandwidth management for OneDrive
  17. Exclude specific kinds of files from being uploaded
  18. Hide the “Deleted files are removed everywhere” reminder
  19. Limit the sync app download speed to a fixed rate (User)
  20. Limit the sync app upload rate to a percentage of throughput
  21. Limit the sync app upload speed to a fixed rate (User)
  22. Prevent the sync app from generating network traffic until users sign in
  23. Prevent users from changing the location of their OneDrive folder (User)
  24. Prevent users from moving their Windows known folders to OneDrive
  25. Prevent users from redirecting their Windows known folders to their PC
  26. Prevent users from syncing libraries and folders shared from other organizations
  27. Prevent users from syncing personal OneDrive accounts (User)
  28. Prompt users to move Windows known folders to OneDrive
  29. Prompt users when they delete multiple OneDrive files on their local computer
  30. Require users to confirm large delete operations
  31. Set the default location for the OneDrive folder (User)
  32. Set the maximum size of a user’s OneDrive that can download automatically
  33. Set the sync app update ring
  34. Silently move Windows known folders to OneDrive
  35. Silently sign in users to the OneDrive sync app with their Windows credentials
  36. Specify SharePoint Server URL and organization name
  37. Specify the OneDrive location in a hybrid environment
  38. Sync Admin Reports
  39. Use OneDrive Files On-Demand
  40. Warn users who are low on disk space

Leave a Comment