How to deploy OneDrive Known Folder Move with Intune – Mobile-First Cloud-First

For years we have be waiting to get OneDrive for Business Known Folder Move (KFM) into Windows, and now it is finally here. What is KFM??? it can move the end-users private data folders from the profile to OneDrive for Business, in my opinion the end user shall not have to choose it the what to use this feature or not. So I will show how to configure this with out any end user interaction – this does not means that it is not possible to give another end user expense.

In this blogpost I will show how to enable it with Intune via PowerShell like I did in a previous blopost on “How to silently configure OneDrive for Business with Intune”

First you need to find your AzureAD tenant ID:

Start the AzureAD Admin Center : https://aad.portal.azure.com

  1. Click on Azure Active Directory
  2. Click Properties
  3. Click copy after the Directory ID – save the ID for later use,

Then we need to create the PowerShell Script with the information we need to apply the settings.

Note: Remember to change TenantID in line 14

$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive"
$Name = "KFMBlockOptIn"
$value = "1"
IF(!(Test-Path $registryPath))
{
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}
ELSE {
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}
$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive"
$Name = "KFMSilentOptIn"
$value = "TenantID"
IF(!(Test-Path $registryPath))
{
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType String -Force | Out-Null}
ELSE {
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType String -Force | Out-Null}
$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive"
$Name = "KFMSilentOptInWithNotification"
$value = "0"
IF(!(Test-Path $registryPath))
{
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}
ELSE {
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}
$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive"
$Name = "KFMBlockOptOut"
$value = "1"
IF(!(Test-Path $registryPath))
{
New-Item -Path $registryPath -Force | Out-Null
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}
ELSE {
New-ItemProperty -Path $registryPath -Name $name -Value $value `
-PropertyType DWORD -Force | Out-Null}

Download the script from GitHub

Where did we get the registry value from??

The new policy file can be found at %localappdata%\Microsoft\OneDrive\18.116.0610.0002\adm

OneDrive.admx and OneDrive.adml

Enable the policy “Prevent users from moving their Windows known folder to Onedrive” and select “Leave them” under options

Enable the policy “Prevent users from redirecting their Windows known folder to their PC”

Enable the policy “Silent redirect Windows known folder to OneDrive”

Set the TenantID

The all of the values you need are in registry

How to deploy the Powershell Script with Intune:

Start the device Management Portal at https://devicemanagement.portal.azure.com

  1. Click Device Configuration
  2. Click PowerShell Scripts
  3. Click Add

  1. Enter a Naem : OneDrive – Enable KFM
  2. Enter a Description : This script will automatic enable OneDrive KFM on Windows
  3. Click to upload the PowerShell Script

Then assign the script to a group of users and test the new feature

How does it looks like from a end user perspective:

First of all the end user OneDrive verion has to be at least 2018 Build 18.116.0610.0002 I have seen that even if the OneDrive has been update for one user on the device user number 2 can have a different OneDrive version and there for the KFM will not work for that user.

OneDrive will get a new blade called “Auto Save” when KFM is enabled.

The Known Windows folder will get OneDrive Sync icon

The known Windows folders will show up in OneDrive

Happy deployment

Read more at :

Migrate Your Files to OneDrive Easily with Known Folder Move

Related Posts