How to Configure Automatic SharePoint Library Sync Using Microsoft Intune

In a browser, open the target SharePoint document library (for example Documents on a team site). In the command bar, click Sync. When the Open Microsoft OneDrive? prompt appears, click Cancel - you only need the identifier. In the We're syncing your files dialog, click Copy library ID. This copies an encoded string containing the tenant, site, web, and list IDs to your clipboard.

If Copy library ID doesn't appear, you likely lack sufficient permissions on the library.

The copied string is URL-encoded. To read it, open Windows PowerShell (no admin rights needed) and run the command below, replacing the placeholder with your copied ID. The output shows readable parameters including siteId and listId. You can paste the whole copied string into the Intune value - decoding is only to verify you copied the right library.

Intune accepts the full copied string as the Value; you don't need to trim it down to a bare GUID.

Sign in to the Microsoft Intune admin center at https://intune.microsoft.com. Go to Devices > Windows > Configuration, then click Create > New policy. Set Platform to Windows 10 and later and Profile type to Settings catalog, then click Create. On the Basics tab, give the profile a clear name such as Sync SharePoint Libraries Automatically and a description noting which libraries and which groups it targets. Click Next.

Use a naming convention that includes the department or library set so other admins can identify the policy's purpose.

On the Configuration settings tab, click + Add settings. In the settings picker, search for configure team site libraries. Under the OneDrive category, select Configure team site libraries to sync automatically (User), then close the picker. Toggle the setting to Enabled. Under Libraries (User), click Add and create one entry per library: enter a friendly Name (for display/reference) and paste the copied library ID as the Value. Repeat Add for each library, then click Next.

Choose the (User) variant so the policy follows the user. The friendly Name is only a label; File Explorer shows the library's real SharePoint name.

On the Assignments tab, under Included groups, click Add groups and select the Microsoft Entra security groups containing your target users. Prefer starting with a small pilot group. Click Next through Scope tags (optional), review everything on Review + create, then click Create.

Because the setting is user-scoped, assign it to user security groups, not device groups. Microsoft 365 groups can't be used for Intune assignment - use security groups (dynamic groups work).

On a device belonging to an assigned user, make sure OneDrive is running (cloud icon in the system tray) and signed in with the work account. After the user signs in - allow up to 8 hours - open File Explorer and look under your organization's name for the configured libraries. To confirm the policy reached the device, open Event Viewer and browse to Applications and Services Logs > Microsoft > Windows > DeviceManagement-Enterprise-Diagnostics-Provider > Admin, then look for Event ID 814 referencing the OneDrive AutoMountTeamSites setting.

To speed up testing, trigger a Sync from the Intune admin center or Company Portal and have the user sign out and back into Windows to refresh the OneDrive session.