How to manage OneDrive using Administrative Templates in Intune
Administrative Templates are responsible to facilitate the management of registry based policies that allows to configure many settings on Windows machine. With the availability of these Administrative Templates in Intune for Windows 10 it is helping Administrators to easily manage applications on Windows 10 or later devices using device configuration profiles.
Profiles in Intune lets you configure settings and then push them to the devices in an Organization.
In this article, we will see how to configure an Administrative Template for OneDrive so that the settings are pushed to the enrolled devices and provide below features.
- Silently Sign in users to the OneDrive Sync client.
- Silently move Windows known folder to OneDrive
- Set File on-Demand states.
Pre-Requisites:
- Devices must be Joined to Azure AD.
- If you have on-premises environment that uses AD, you can enable Hybrid AD Join.
Step 1:
- Login to Microsoft Endpoint Manager Admin Center (endpoint.microsoft.com).
- Under Devices, go to Configuration Profiles and then click Create Profile.
![Machine generated alternative text:
Microsoft Endpoint Manager admin center
Hame
Dashboard
All services
* FAVORITES
Devices
Apps
Endpoint security
Reports
users
Groups
Home > Devices
Devices I Configuration profiles
P Search (Ctrl+/)
Device enrollment
Enroll devices
Policy
pliance policies
Conditional access
Configuration profiles
Create profile
P Search by name
Profile Name
— Columns
No device configuration profiles.](https://www.cloudfronts.com/wp-content/uploads/2021/01/1.png)
- Select Windows 10 and later as Platform and Profile will be Administrative Template. Click Create.
![Machine generated alternative text:
Create a profile
Windows 10 and later
profile
Administrative Templates
Administrative Templates](https://www.cloudfronts.com/wp-content/uploads/2021/01/2.png)
- Enter a Name for the Profile and optionally a Description. Click Next.
![Machine generated alternative text:
Home > Devices
Create profile
Ad min istrativeTem plates
O Basics
Name* O
Description
@ Configuration settings @ Scope tags @ Assignments
OneDrive Configuration
O
@ Review + create](https://www.cloudfronts.com/wp-content/uploads/2021/01/3.png)
- Under Computer Configuration, select OneDrive and then select the settings you want to configure.
![Machine generated alternative text:
Create profile
Ad min istrativeTem plates
All Settin s
Computer Configuration
ser o gure Ian
Computer Configuration
Computer Configuration
oneDriv
Setting Name
Allow OneDrive to disable Windows per..
Allow syncing OneDrive accounts for on...
Block syncing OneDrive accounts for sp...
Enable automatic upload bandwidth ma...
Prevent users from moving their Windo
State
Not configured
Not configured
Not configured
Not configured
Not configured
Setting type 1'
Device
Device
Device
Device
Device
Path
\OneDrive
\OneDrive
\OneDrive
\OneDrive
\OneDrive](https://www.cloudfronts.com/wp-content/uploads/2021/01/4.png)
- In our instance, we will configure the first setting which is Silently signed-in users on to the OneDrive Sync client.
![Machine generated alternative text:
Home > Devices
Create profile
Ad min istrativeTem plates
Silently sign in users to the OneDrive sync a...
\OneDrive
x
Allow syncing OneDrive accounts for on...
Not configured
Block syncing OneDrive accounts for sp...
Not configured
Enable automatic upload bandwidth ma...
Not configured
Prevent users from moving their Windo
Not configured
Prompt users to move Windows known Not configured
Prompt users when they delete multiple..
Not configured
Set the maximum size of a users OneDr...
Not configured
move Windows known folders t..
Not configured
Silently sign in users to the OneDrive sy...
Not configured
Specify the OneDrive location in a hybri..
Not configured
use OneDrive Files On-Demand
Not configured
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
This setting lets you silently sign in users to the OneDrive sync app (OneDrive.exe) with their
Windows credentials.
If you enable this setting, users who are signed in on the PC with the primary Windows account
(the account used to join the PC to the domain) can set up the sync app without entering the
credentials for the account. Users will still be shown OneDrive Setup so they can select folders
to sync and change the location of their OneDrive folder. If a user is using the previous
OneDrive for Business sync app (Groove.exe), the new sync app will attempt to take over
syncing the user's OneDrive from the previous app and preserve the users sync settings. This
setting is frequently used together with "Set the maximum size of a users OneDrive that can
download automatically" on PCs that dont have Files On-Demand, and "Set the default
location for the OneDrive folder."
If you disable or do not configure this setting, users will need to sign in with their work or
school account to set up sync.
Setting type: Device
Su orted on: At least Windows Server 2008 R2 or Windows 7
@ Enabled C) Disabled C) Not configured](https://www.cloudfronts.com/wp-content/uploads/2021/01/5-1024x532.png)
- Second setting is to silently move the windows known folders to OneDrive. In this case the known folders which is Documents, Desktop and Pictures will be automatically get synced with the OneDrive.
Note: Some configuration required Tenant ID which you get from portal.azure.com > Azure Active Directory.
![Machine generated alternative text:
Home > Devices
Create profile
Ad min istrativeTem plates
Allow syncing OneDrive accounts for on...
Not configured
Block syncing OneDrive accounts for sp...
Not configured
Enable automatic upload bandwidth ma...
Not configured
Prevent users from moving their Windo
Not configured
Prompt users to move Windows known Not configured
Pr pt users when they delete multiple...
Not configured
aximum size of a users OneDr...
Not configured
Set t.
Silently move Windows known folders t..
Not configured
Silently sign in users to the OneDrive sy...
Enabled
Specify the OneDrive location in a hybri..
Not configured
use OneDrive Files On-Demand
Not configured
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
Silently move Windows known folders to O... x
\OneDrive
builds, it redirects known folders that contain content and moves the content to OneDrive.
We recommend using this setting together with "Prompt users to move Windows known
folders to OneDrive." If moving the known folders silently does not succeed, users will be
prompted to correct the error and continue.
If you enable this setting and provide ßur tenant ID, you can choose whether to display a
notification to users after their folders have been redirected.
If you disable or do not configure this setting, your users' known folders will not be silently
redirected and/or moved to OneDrive.
Setting type: Device
Supported on: At least Windows Server 2008 R2 or Windows 7
Disabled O
Tenant ID: *
8ab400f2-7ded-4061-85fc-0f1
Shaw notification to users after folders have been redirected:](https://www.cloudfronts.com/wp-content/uploads/2021/01/6-1024x527.png)
- Third setting is to Use files on-demand. Files on-demand allows you to access all your files stored in the cloud using File Explorer without having to sync them directly and storage space on your device.
![Machine generated alternative text:
Home > Devices
Create profile
Ad min istrativeTempIates
Use OneDrive Files On-Demand
\OneDrive
This setting lets you control whether OneDrive Files On-Demand is enabled far ßur
organization.
If you enable this setting, OneDrive Files On-Demand will be turned on by default.
x
Allow syncing OneDrive accounts for on...
Not configured
Block syncing OneDrive accounts for sp...
Not configured
Enable automatic upload bandwidth ma...
Not configured
Prevent users from moving their Windo
Not configured
Prompt users to move Windows known Not configured
Prompt users when they delete multiple...
Not configured
t the maximum size of a users OneDr...
Not configured
S ntly move Windows known folders t..
Not configured
Sile
sign in users to the OneDrive sy...
Enabled
Spec-
e OneDrive location in a hybri..
Not configured
use OneDrive Files On-Demand
Not configured
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
Device
If you disable this setting, OneDrive Files On-Demand will be explicitly disabled and users can't
turn it an.
If you do not configure this setting, users can turn OneDrive Files On-Demand on or off.
Setting type: Device
Supported on: At least Windows Server 2016, Windows 10 Version 1709
@ Enabled C) Disabled C) Not configured](https://www.cloudfronts.com/wp-content/uploads/2021/01/7-1024x524.png)
- Similarly, there are various other setting which can be configured.
Step 2:
- Once the settings are configured, click Next and go to Assignments.
- Under Assignments, you need to select a Group, if you want to assign this profile to a specific set of people. You may also choose All users or All Devices.
![](https://www.cloudfronts.com/wp-content/uploads/2021/01/8.png)
- Once selected, click Next, Review and create the Profile.
With the help of these Administrative Templates, Administrators can easily manage the Applications and push the settings to all the Users and Devices.