Silently move Windows known folders to OneDrive.When using Azure AD Join or Hybrid Azure AD Join, the Azure AD user token is already available and can be used to automatically sign into OneDrive for Business – no need to type in e-mail addresses (UPNs) and passwords. Silently sign in users to the OneDrive sync client with their Windows credentials.You don’t want to wait for all the actual content to sync to the device (and you probably don’t want to take up the disk space either), so this tells OneDrive to keep the data in the cloud and just set up the file and folder structure – files you try to open will be downloaded on demand. Those are the four settings that you need (although you might choose to set more): Here are the options that I configured to set this up: From there, you can search for the options that you want to configure. Just create a new device configuration profile, choose “Windows 10 and later” for the supported platform, and “Administrative Templates” as the profile type. Instead, the policies are available directly in the Intune portal. With the Administrative Templates support in Intune now generally available, it’s even easier to do this as you no longer need to use custom OMA-URIs.
Nicola Suter published a good blog last year that talked about how to do that. But since the OneDrive client is configured via GPO and not MDM policies, that meant using some rather nasty-looking custom OMA-URI policies in Intune. The OneDrive for Business team has made a number of changes to support automatic configuration of OneDrive, including support for automatically signing in, configuring known folder migration, enabling offline files, and more.
0 kommentar(er)
