How to manage OneDrive using Administrative Templates in Intune

Administrative Templates are responsible to facilitate the management of registry based policies that allows to configure many settings on Windows machine. With the availability of these Administrative Templates in Intune for Windows 10 it is helping Administrators to easily manage applications on Windows 10 or later devices using device configuration profiles.

Profiles in Intune lets you configure settings and then push them to the devices in an Organization.

In this article, we will see how to configure an Administrative Template for OneDrive so that the settings are pushed to the enrolled devices and provide below features.

  1. Silently Sign in users to the OneDrive Sync client.
  2. Silently move Windows known folder to OneDrive
  3. Set File on-Demand states.

Pre-Requisites:

  1. Devices must be Joined to Azure AD.
  2. If you have on-premises environment that uses AD, you can enable Hybrid AD Join.

Step 1:

  • Login to Microsoft Endpoint Manager Admin Center (endpoint.microsoft.com).
  • Under Devices, go to Configuration Profiles and then click Create Profile.
     
Machine generated alternative text:
Microsoft Endpoint Manager admin center 
Hame 
Dashboard 
All services 
* FAVORITES 
Devices 
Apps 
Endpoint security 
Reports 
users 
Groups 
Home > Devices 
Devices I Configuration profiles 
P Search (Ctrl+/) 
Device enrollment 
Enroll devices 
Policy 
pliance policies 
Conditional access 
Configuration profiles 
Create profile 
P Search by name 
Profile Name 
— Columns 
No device configuration profiles.
  • Select Windows 10 and later as Platform  and Profile will be Administrative Template. Click Create.
     
Machine generated alternative text:
Create a profile 
Windows 10 and later 
profile 
Administrative Templates 
Administrative Templates
  • Enter a Name for the Profile and optionally a Description. Click Next.

     
Machine generated alternative text:
Home > Devices 
Create profile 
Ad min istrativeTem plates 
O Basics 
Name* O 
Description 
@ Configuration settings @ Scope tags @ Assignments 
OneDrive Configuration 
O 
@ Review + create
  • Under Computer Configuration, select OneDrive and then select the settings you want to configure.

     
Machine generated alternative text:
Create profile 
Ad min istrativeTem plates 
All Settin s 
Computer Configuration 
ser o gure Ian 
Computer Configuration 
Computer Configuration 
oneDriv 
Setting Name 
Allow OneDrive to disable Windows per.. 
Allow syncing OneDrive accounts for on... 
Block syncing OneDrive accounts for sp... 
Enable automatic upload bandwidth ma... 
Prevent users from moving their Windo 
State 
Not configured 
Not configured 
Not configured 
Not configured 
Not configured 
Setting type 1' 
Device 
Device 
Device 
Device 
Device 
Path 
\OneDrive 
\OneDrive 
\OneDrive 
\OneDrive 
\OneDrive
  • In our instance, we will configure the first setting which is Silently signed-in users on to the OneDrive Sync client.
Machine generated alternative text:
Home > Devices 
Create profile 
Ad min istrativeTem plates 
Silently sign in users to the OneDrive sync a... 
\OneDrive 
x 
Allow syncing OneDrive accounts for on... 
Not configured 
Block syncing OneDrive accounts for sp... 
Not configured 
Enable automatic upload bandwidth ma... 
Not configured 
Prevent users from moving their Windo 
Not configured 
Prompt users to move Windows known Not configured 
Prompt users when they delete multiple.. 
Not configured 
Set the maximum size of a users OneDr... 
Not configured 
move Windows known folders t.. 
Not configured 
Silently sign in users to the OneDrive sy... 
Not configured 
Specify the OneDrive location in a hybri.. 
Not configured 
use OneDrive Files On-Demand 
Not configured 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
This setting lets you silently sign in users to the OneDrive sync app (OneDrive.exe) with their 
Windows credentials. 
If you enable this setting, users who are signed in on the PC with the primary Windows account 
(the account used to join the PC to the domain) can set up the sync app without entering the 
credentials for the account. Users will still be shown OneDrive Setup so they can select folders 
to sync and change the location of their OneDrive folder. If a user is using the previous 
OneDrive for Business sync app (Groove.exe), the new sync app will attempt to take over 
syncing the user's OneDrive from the previous app and preserve the users sync settings. This 
setting is frequently used together with "Set the maximum size of a users OneDrive that can 
download automatically" on PCs that dont have Files On-Demand, and "Set the default 
location for the OneDrive folder." 
If you disable or do not configure this setting, users will need to sign in with their work or 
school account to set up sync. 
Setting type: Device 
Su orted on: At least Windows Server 2008 R2 or Windows 7 
@ Enabled C) Disabled C) Not configured
  • Second setting is to silently move the windows known folders to OneDrive. In this case the known folders which is Documents, Desktop and Pictures will be automatically get synced with the OneDrive.

Note: Some configuration required Tenant ID which you get from portal.azure.com >  Azure Active Directory.

Machine generated alternative text:
Home > Devices 
Create profile 
Ad min istrativeTem plates 
Allow syncing OneDrive accounts for on... 
Not configured 
Block syncing OneDrive accounts for sp... 
Not configured 
Enable automatic upload bandwidth ma... 
Not configured 
Prevent users from moving their Windo 
Not configured 
Prompt users to move Windows known Not configured 
Pr pt users when they delete multiple... 
Not configured 
aximum size of a users OneDr... 
Not configured 
Set t. 
Silently move Windows known folders t.. 
Not configured 
Silently sign in users to the OneDrive sy... 
Enabled 
Specify the OneDrive location in a hybri.. 
Not configured 
use OneDrive Files On-Demand 
Not configured 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Silently move Windows known folders to O... x 
\OneDrive 
builds, it redirects known folders that contain content and moves the content to OneDrive. 
We recommend using this setting together with "Prompt users to move Windows known 
folders to OneDrive." If moving the known folders silently does not succeed, users will be 
prompted to correct the error and continue. 
If you enable this setting and provide ßur tenant ID, you can choose whether to display a 
notification to users after their folders have been redirected. 
If you disable or do not configure this setting, your users' known folders will not be silently 
redirected and/or moved to OneDrive. 
Setting type: Device 
Supported on: At least Windows Server 2008 R2 or Windows 7 
Disabled O 
Tenant ID: * 
8ab400f2-7ded-4061-85fc-0f1 
Shaw notification to users after folders have been redirected:
  • Third setting is to Use files on-demand. Files on-demand allows you to access all your files stored in the cloud using File Explorer without having to sync them directly and storage space on your device.
Machine generated alternative text:
Home > Devices 
Create profile 
Ad min istrativeTempIates 
Use OneDrive Files On-Demand 
\OneDrive 
This setting lets you control whether OneDrive Files On-Demand is enabled far ßur 
organization. 
If you enable this setting, OneDrive Files On-Demand will be turned on by default. 
x 
Allow syncing OneDrive accounts for on... 
Not configured 
Block syncing OneDrive accounts for sp... 
Not configured 
Enable automatic upload bandwidth ma... 
Not configured 
Prevent users from moving their Windo 
Not configured 
Prompt users to move Windows known Not configured 
Prompt users when they delete multiple... 
Not configured 
t the maximum size of a users OneDr... 
Not configured 
S ntly move Windows known folders t.. 
Not configured 
Sile 
sign in users to the OneDrive sy... 
Enabled 
Spec- 
e OneDrive location in a hybri.. 
Not configured 
use OneDrive Files On-Demand 
Not configured 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
Device 
If you disable this setting, OneDrive Files On-Demand will be explicitly disabled and users can't 
turn it an. 
If you do not configure this setting, users can turn OneDrive Files On-Demand on or off. 
Setting type: Device 
Supported on: At least Windows Server 2016, Windows 10 Version 1709 
@ Enabled C) Disabled C) Not configured
  • Similarly, there are various other setting which can be configured.

Step 2:

  • Once the settings are configured, click Next and go to Assignments.
  • Under Assignments, you need to select a Group, if you want to assign this profile to a specific set of people. You may also choose All users or All Devices.
     
  • Once selected, click Next, Review and create the Profile.

With the help of these Administrative Templates, Administrators can easily manage the Applications and push the settings to all the Users and Devices.


Share Story :