Configuring OneDrive Known Folder Move via Intune

Why is OneDrive Known Folder Move (KFM) a Must-Have?

Users love saving files to their Desktop, Documents, and Pictures folders. However, these files often aren't backed up, leading to data loss if a laptop crashes or hardware fails. That's where KFM comes in!

Known Folder Move automatically redirects your users' Desktop, Documents, and Pictures folders to OneDrive. This means:

• Automatic Backup: Critical user data is automatically backed up to OneDrive, without any manual work required from the user.

• No User Disruption: There's no disruption to user habits; they continue saving files where they always have.

• Seamless Device Transitions: If a user switches devices or their current device crashes, their files are immediately available simply by logging in again – no manual backups needed.

• Compliance & Security: Helps with data protection and security policies.

It's an amazing policy that saves a lot of headaches, especially when replacing multiple machines or dealing with lost files!

Configuring OneDrive KFM in Intune (Step-by-Step):

Let's walk through how to set this up in Intune.

1. Navigate to Configuration Profiles: In the Intune portal, go to "Devices" > "Windows" > "Configuration Profiles".

2. Create a New Policy: Click "Create Profile," select "Windows 10 and later" as the platform, and "Settings catalog" as the profile type.

3. Name and Describe: Give your policy a descriptive name, like "OneDrive KFM," and add a helpful description.

4. Add Settings: In the "Configuration settings" section, click "Add settings" and search for "OneDrive".

5. Key OneDrive Settings to Enable:

   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   
   

   • Silently sign in users to the OneDrive sync app with their Windows credentials: This automatically signs users in using their Azure Active Directory credentials, making the process seamless.

   • Use OneDrive Files On-Demand: This saves disk space by only downloading files when the user tries to use them.

   • Silently move Windows known folders to OneDrive: This is the core setting. You can choose specific folders (Desktop, Documents, Pictures) if you need granular control, or enable the general setting which automatically redirects all three.

   • Show notifications to user after folders have been redirected: (Optional, but recommended) Keeps users informed.

   • Prevent users from redirecting their Windows known folders to their PC: This prevents users from moving their folders back to their local machine, ensuring data remains backed up.

   • Prevent users from syncing personal OneDrive accounts: A crucial security setting to ensure users only sync with their organizational accounts.

   • Exclude specific kinds of files from being uploaded: (Optional) You can specify file extensions (e.g., .pst, .iso) that should not be uploaded to OneDrive.

   • Limit the upload rate: (Important for large deployments) If you're deploying to many users at once, consider limiting the upload bandwidth to avoid network saturation, especially with large files like old PSTs.

   • Tenant ID: You'll need to provide your tenant ID for some settings.

6. Assignments: Assign the policy to your desired user groups. It's highly recommended to test this in phases with smaller groups first to monitor bandwidth usage and user experience before a broad deployment.

What Happens After Policy Application?

Once the policy is applied and the device syncs with Intune:

• The OneDrive sync app will automatically sign in.

• Your Desktop, Documents, and Pictures folders will be redirected to OneDrive.

• Files saved to these folders will automatically sync to OneDrive.

• Users will be prevented from changing the location of these folders locally or syncing personal OneDrive accounts.

This policy is incredibly powerful for ensuring data backup and a seamless user experience across devices. Give it a try!

Subscribe to our newsletter

Stay in the Loop – Join Our Newsletter