How to Configure OneDrive Auto Sign-in Using Microsoft Intune

In Intune, go to Devices > Configuration > Create > New Policy. Select Windows 10 and later, profile type Administrative Templates.

Name it "OneDrive Auto Sign-in and KFM". In the template settings, navigate to User Configuration > OneDrive.

Enable Silently sign in users to the OneDrive sync app with their Windows credentials. This uses the user's Windows sign-in token to authenticate to OneDrive without prompting.

Also configure Set the default folder for the OneDrive folder if you want to control where the OneDrive root folder is created locally.

Silent sign-in requires Entra ID joined or hybrid joined devices. It uses the Windows primary refresh token (PRT) for authentication. Does not work on workgroup devices.

In the same ADMX profile, find Silently move Windows known folders to OneDrive. Enable it and enter your Entra tenant ID (found in Entra admin center > Overview).

Optionally enable Prevent users from redirecting their Windows known folders to their PC to block users from undoing the redirect.

Optionally enable Prevent users from moving their Windows known folders to OneDrive if you want to prevent manual KFM (use this only if you want Intune-only control).

Assign the profile to your target device group. At the next user sign-in, OneDrive will silently redirect Desktop, Documents, and Pictures to the user's OneDrive for Business.

KFM moves files in the background. Large folders may take time to upload. Monitor OneDrive sync status via the Intune OneDrive health dashboard or OneDrive admin center.

Verify on a device: Check that the OneDrive icon appears in the system tray and shows the user's name. Open File Explorer and confirm Desktop, Documents, and Pictures show the OneDrive cloud icon.

Check Intune: Go to Devices > Configuration > select the profile > Device status. All targeted devices should show "Succeeded".

Troubleshoot sync errors: If OneDrive shows sync conflicts or errors:

1# Check OneDrive process
2Get-Process OneDrive
3
4# Check sync status via registry
5Get-ItemProperty 'HKCU:\Software\Microsoft\OneDrive\Accounts\Business1' | Select-Object UserEmail, UserFolder

Common issues: insufficient OneDrive storage quota, files with unsupported characters, files locked by other applications.

OneDrive sync logs are at %localappdata%\Microsoft\OneDrive\logs. The Intune OneDrive health report shows sync status across your fleet.