Configure OneDrive
Configures the OneDrive sync app through the OneDrive policies Microsoft documents for the Windows sync app. Use it to sign users in silently, to move the Desktop, Documents and Pictures folders into OneDrive, to control Files On-Demand, bandwidth, exclusions and the folder layout, and to block personal or external accounts.\n\nEvery setting has an Unchanged option, and every text field can be left empty. Only the settings you actually choose are written to the device, so this brick can be combined with settings you already manage elsewhere.\n\nSettings that belong to the user rather than the device are written for every user profile on the device, including the profile new users are created from.\n\nKnown Folder Move is not applied instantly. The folders are moved the next time the user signs in to OneDrive on the device.
Parameters
Section titled “Parameters”Tenant ID
Section titled “Tenant ID”Optional
The Microsoft Entra tenant ID of your organisation. Find it in the Microsoft Entra admin center under Overview, or in the Microsoft 365 admin center.\n\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\n\nThe value can be typed with or without curly braces.\n\nWhen do you need it? Some settings are stored per organisation rather than per device: the custom name for the OneDrive folder, the maximum size that downloads automatically, the default location of the OneDrive folder, and whether users may change that location. Fill this in whenever you use one of those. If you use none of them, leave it empty.\n\nIf one of those settings is filled in and the Tenant ID is missing or is not a valid ID, the brick fails with a clear message instead of leaving a half finished configuration.
Silent Account Configuration
Section titled “Silent Account Configuration”Required — Default: Unchanged
Signs users in to OneDrive automatically with the Windows account they are already using, so nobody has to type credentials to start syncing. It works on devices that are joined to Microsoft Entra ID, and users are still shown the setup window so they can pick folders and change the location of their OneDrive folder.\n\nMicrosoft recommends enabling this. Disable to make users sign in themselves.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-sign-in-users-to-the-onedrive-sync-app-with-their-windows-credentials Allowed values: Enabled, Disabled, Unchanged.
Files On-Demand
Section titled “Files On-Demand”Required — Default: Unchanged
Lets users see every file in OneDrive in File Explorer without it taking up disk space, and downloads a file only when it is opened. Microsoft recommends keeping this enabled.\n\nEnable to switch it on for new setups. Disable to switch it off and stop users from turning it on themselves.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#use-onedrive-files-on-demand Allowed values: Enabled, Disabled, Unchanged.
Silently Move Known Folders To OneDrive
Section titled “Silently Move Known Folders To OneDrive”Optional
Moves the Desktop, Documents and Pictures folders into OneDrive without asking the user, so those folders are backed up automatically. The move happens the next time the user signs in to OneDrive on the device, not while this brick runs.\n\nEnter the Microsoft Entra tenant ID of your organisation to switch this on. It is the same ID as in the Tenant ID field above.\n\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\n\nMicrosoft recommends rolling this out to no more than 1,000 existing devices a day and 4,000 a week, and combining it with the setting that prompts users, so anyone the silent move fails for is asked to fix the problem. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive
Move The Desktop Folder Silently
Section titled “Move The Desktop Folder Silently”Required — Default: Unchanged
Decides whether the silent move includes the Desktop folder. It only has an effect when Silently Move Known Folders is filled in.\n\nEnable to move the Desktop folder. Disable to leave it on the device.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive Allowed values: Enabled, Disabled, Unchanged.
Move The Documents Folder Silently
Section titled “Move The Documents Folder Silently”Required — Default: Unchanged
Decides whether the silent move includes the Documents folder. It only has an effect when Silently Move Known Folders is filled in.\n\nEnable to move the Documents folder. Disable to leave it on the device.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive Allowed values: Enabled, Disabled, Unchanged.
Move The Pictures Folder Silently
Section titled “Move The Pictures Folder Silently”Required — Default: Unchanged
Decides whether the silent move includes the Pictures folder. It only has an effect when Silently Move Known Folders is filled in.\n\nEnable to move the Pictures folder. Disable to leave it on the device.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive Allowed values: Enabled, Disabled, Unchanged.
Notify Users After The Silent Move
Section titled “Notify Users After The Silent Move”Required — Default: Unchanged
Decides whether users are told that their folders have been moved. It only has an effect when Silently Move Known Folders is filled in.\n\nEnable to show a notification once the folders have been moved. Disable to move them without saying anything.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive Allowed values: Enabled, Disabled, Unchanged.
Prompt Users To Move Known Folders To OneDrive
Section titled “Prompt Users To Move Known Folders To OneDrive”Optional
Shows users a window asking them to move their Desktop, Documents and Pictures folders into OneDrive. If they close it, a reminder stays in the activity centre until every folder has been moved.\n\nEnter the Microsoft Entra tenant ID of your organisation to switch this on. It is the same ID as in the Tenant ID field above.\n\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\n\nUsers who have already pointed their folders at a different OneDrive account are asked to point them at your organisation instead, and the files they left behind stay where they are. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-to-move-windows-known-folders-to-onedrive
Block Moving Known Folders Back To The Device
Section titled “Block Moving Known Folders Back To The Device”Required — Default: Unchanged
Keeps the Desktop, Documents and Pictures folders in OneDrive once they have been moved there. The button that stops protecting a folder is switched off, and a user who tries anyway gets an error.\n\nEnable to keep the folders protected. Disable to let users move them back to the device.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-redirecting-their-windows-known-folders-to-their-pc Allowed values: Enabled, Disabled, Unchanged.
Block Moving Known Folders To OneDrive
Section titled “Block Moving Known Folders To OneDrive”Required — Default: Unchanged
Stops users from moving their Desktop, Documents and Pictures folders into OneDrive themselves. The prompt to protect those folders is not shown and the backup command is switched off.\n\nFolders that have already been moved stay in OneDrive.\n\nThis has no effect if you also switch on the setting that moves the known folders silently or the one that prompts the user. Enable to block, disable to let users decide. Choose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-moving-their-windows-known-folders-to-onedrive Allowed values: Enabled, Disabled, Unchanged.
Block Personal OneDrive Accounts
Section titled “Block Personal OneDrive Accounts”Required — Default: Unchanged
Controls whether users may sign in with a personal Microsoft account and sync their private OneDrive files on the device. They are allowed to by default.\n\nEnable to block it. Anyone already syncing a personal account is told that syncing has stopped, and the files already on the device stay there. Disable to allow personal accounts again.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-syncing-personal-onedrive-accounts Allowed values: Enabled, Disabled, Unchanged.
Block Syncing Content Shared From Other Organizations
Section titled “Block Syncing Content Shared From Other Organizations”Required — Default: Unchanged
Controls whether users may sync libraries and folders that another organisation has shared with them.\n\nEnable to stop that content from syncing. Disable to allow it again.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-syncing-libraries-and-folders-shared-from-other-organizations Allowed values: Enabled, Disabled, Unchanged.
Allow Syncing Only For Specific Organizations
Section titled “Allow Syncing Only For Specific Organizations”Optional
A list of the organisations users are allowed to sign in to OneDrive with. Anyone signing in with an account from an organisation that is not on the list gets an error, and files that are already syncing for such an account stop syncing.\n\nSpecify one or more organisation IDs. Type each ID and add it to the list as its own entry.\n\nExample entry: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\n\nThis list wins over the block list, so do not fill in both. Leave this list empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-syncing-onedrive-accounts-for-only-specific-organizations
Block Syncing For Specific Organizations
Section titled “Block Syncing For Specific Organizations”Optional
A list of the organisations users are not allowed to sign in to OneDrive with. Anyone signing in with an account from one of these organisations gets an error, and files that are already syncing for such an account stop syncing.\n\nSpecify one or more organisation IDs. Type each ID and add it to the list as its own entry.\n\nExample entry: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\n\nThis list is ignored if the allow list is also filled in, so do not fill in both. Leave this list empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#block-syncing-onedrive-accounts-for-specific-organizations
Prevent Automatic Sign In With Existing Credentials
Section titled “Prevent Automatic Sign In With Existing Credentials”Required — Default: Unchanged
Controls whether OneDrive may sign itself in using a work account that is already available to other Microsoft apps on the device.\n\nEnable to stop OneDrive from signing in on its own. Disable to let it sign in automatically.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-the-sync-app-from-automatically-signing-in-users-with-existing-credentials Allowed values: Enabled, Disabled, Unchanged.
Prevent Network Traffic Before Users Sign In
Section titled “Prevent Network Traffic Before Users Sign In”Required — Default: Unchanged
Controls whether OneDrive may use the network, for instance to check for updates, before anyone has signed in to it on the device.\n\nEnable to keep OneDrive quiet until the user signs in or starts syncing something. Disable to let it start automatically when the user signs in to Windows.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-the-sync-app-from-generating-network-traffic-until-users-sign-in Allowed values: Enabled, Disabled, Unchanged.
Custom Name For The OneDrive Folder
Section titled “Custom Name For The OneDrive Folder”Optional
The name of the local OneDrive folder that is created for new users. By default the folder is named after your organisation, and a shorter name leaves more room for long file and folder names underneath it.\n\nExample: OneDrive\n\nThe name cannot contain any of the characters \ / : * ? “ < > |, because Windows does not allow them in a folder name.\n\nRequires the Tenant ID field to be filled in. People who are already syncing keep the old name until they disconnect and reconnect their account. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-a-custom-name-for-the-onedrive-folder
Default Location For The OneDrive Folder
Section titled “Default Location For The OneDrive Folder”Optional
The folder on the device where the local OneDrive folder is created. Without this setting it is created inside the user profile.\n\nExample: D:\\OneDrive\n\nRequires the Tenant ID field to be filled in. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-default-location-for-the-onedrive-folder
Prevent Users From Changing The OneDrive Folder Location
Section titled “Prevent Users From Changing The OneDrive Folder Location”Optional — Default: Unchanged
Controls whether users may choose where their local OneDrive folder is created. When they may not, the link that changes the location is hidden during setup and the folder is created in the default location, or in the location you set above.\n\nChoose Prevent to take the choice away from everyone on the device. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured.\n\nRequires the Tenant ID field to be filled in.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-changing-the-location-of-their-onedrive-folder Allowed values: Prevent, Allow, Unchanged.
Files Excluded From Upload
Section titled “Files Excluded From Upload”Optional
A list of file names or patterns that are never uploaded to OneDrive or SharePoint. The files stay on the device, no error is shown, and matching is not case sensitive. An asterisk stands for any series of characters.\n\nSpecify one or more file names or patterns. Pick a suggestion or type your own, and add each entry to the list separately.\n\nExample entries: setup.exe and *.pst\n\nThis does not remove anything that has already been uploaded, and OneDrive must be restarted before a change takes effect. Leave this list empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#exclude-specific-kinds-of-files-from-being-uploaded Allowed values: setup.exe, *.pst.
Folders Excluded From Upload
Section titled “Folders Excluded From Upload”Optional
A list of folder names that are never uploaded to OneDrive or SharePoint. The folders stay on the device, no error is shown, and matching is not case sensitive. Wildcards are not supported here, so enter complete folder names.\n\nSpecify one or more folder names. Pick a suggestion or type your own, and add each folder name to the list as its own entry.\n\nExample entry: PowerShell\n\nThis does not remove anything that has already been uploaded, and OneDrive must be restarted before a change takes effect. Leave this list empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#exclude-specific-kinds-of-folders-from-being-uploaded Allowed values: PowerShell.
Team Site Libraries That Sync Automatically
Section titled “Team Site Libraries That Sync Automatically”Optional
The SharePoint team site libraries that start syncing on their own the next time the user signs in to OneDrive, spread over an eight hour window so the network is not hit all at once. The content is synced as online-only files and the user cannot stop it.\n\nSpecify one or more libraries. Write each one as a friendly name, an equals sign, and the whole library ID, and add it to the list as its own entry. The friendly name is only there to identify the library and is yours to choose. The library ID contains equals signs of its own, so only the first one counts as the separator.\n\nExample entry: Marketing=tenantId=3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34&siteId=…&webId=…&listId=…&webUrl=…&version=1\n\nWhere do you find the library ID? Sign in as a global administrator or a SharePoint administrator in Microsoft 365, go to the library, and select Sync. In the Starting sync dialog, select the Copy library ID link, then paste it after the equals sign.\n\nFiles On-Demand must be switched on, and this does not work for on-premises SharePoint sites. Taking a library back out of this list does not stop it syncing on devices it was already applied to. Leave this list empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#configure-team-site-libraries-to-sync-automatically
Convert Synced Team Site Files To Online Only
Section titled “Convert Synced Team Site Files To Online Only”Required — Default: Unchanged
Turns the files in synced SharePoint team sites into online-only files, so they take up no disk space until someone opens them. This is worth switching on when many devices sync the same team site.\n\nFiles On-Demand must be enabled for this to work, and it does not apply to on-premises SharePoint sites.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#convert-synced-team-site-files-to-online-only-files Allowed values: Enabled, Disabled, Unchanged.
Block Downloads When Disk Space Is Low
Section titled “Block Downloads When Disk Space Is Low”Optional
The amount of free disk space, in megabytes, below which OneDrive stops downloading files.\n\nEnter a whole number between 0 and 10240000.\n\nExample: 1024\n\nLeave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#block-file-downloads-when-users-are-low-on-disk-space
Warn Users When Disk Space Is Low
Section titled “Warn Users When Disk Space Is Low”Optional
The amount of free disk space, in megabytes, below which users are warned and offered help to free up space when a download would take them under it.\n\nEnter a whole number between 0 and 10240000.\n\nExample: 2048\n\nLeave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#warn-users-who-are-low-on-disk-space
Maximum OneDrive Size That Downloads Automatically
Section titled “Maximum OneDrive Size That Downloads Automatically”Optional
The size, in megabytes, above which a user is asked to pick which folders to sync instead of having everything downloaded for them. Use it together with silent sign in on devices that do not have Files On-Demand switched on.\n\nEnter a whole number of megabytes between 0 and 4294967295. Microsoft’s own default is 500.\n\nExample: 5000\n\nRequires the Tenant ID field to be filled in. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-maximum-size-of-a-users-onedrive-that-can-download-automatically
Automatic Upload Bandwidth Management
Section titled “Automatic Upload Bandwidth Management”Required — Default: Unchanged
Lets OneDrive upload in the background only while there is spare capacity, so it gets out of the way of everything else using the network and speeds up again when the network is quiet.\n\nEnable to switch this on and prevent users from changing the upload rate. Disable to let users choose a fixed rate or automatic adjustment themselves.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-automatic-upload-bandwidth-management-for-onedrive Allowed values: Enabled, Disabled, Unchanged.
Upload Rate Limit In Percent Of Throughput
Section titled “Upload Rate Limit In Percent Of Throughput”Optional
Limits how much of the available upload capacity OneDrive may use, as a percentage. The lower the number, the slower files are uploaded, and the more capacity is left for everything else on the device.\n\nEnter a whole number between 10 and 99. Microsoft recommends 50 or higher. A useful time to set this is while you are rolling out the folder backup settings, so uploading the existing content does not saturate the network.\n\nUsers cannot change the limit while it is set here. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-upload-rate-to-a-percentage-of-throughput
Upload Rate Limit In Kilobytes Per Second
Section titled “Upload Rate Limit In Kilobytes Per Second”Optional
A fixed maximum speed for uploading files, in kilobytes per second. Users cannot change it while it is set here.\n\nEnter a whole number between 1 and 100000. Anything below 50 is treated as 50.\n\nIf you would rather have OneDrive adjust itself to whatever capacity is free, use Automatic Upload Bandwidth Management instead. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-upload-speed-to-a-fixed-rate
Download Rate Limit In Kilobytes Per Second
Section titled “Download Rate Limit In Kilobytes Per Second”Optional
A fixed maximum speed for downloading files, in kilobytes per second. It does not apply to downloading updates to OneDrive itself, and users cannot change it while it is set here.\n\nEnter a whole number between 1 and 100000. Anything below 50 is treated as 50.\n\nMicrosoft recommends using this only where traffic has to be kept strictly under control, such as during the initial rollout, because a permanent limit slows syncing down for everyone. Leave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-download-speed-to-a-fixed-rate
Sync App Update Ring
Section titled “Sync App Update Ring”Optional — Default: Unchanged
Decides how early a device receives new versions of OneDrive.\n\nInsider gets builds that preview features on their way to OneDrive. Production gets the latest features as they become available, and is the ring OneDrive uses by itself when nothing is configured. Deferred gets new features, then bug fixes and performance improvements, last of all, and is the ring that lets you serve updates from a location on your own network and control when they land, within a 60 day window.\n\nMicrosoft recommends putting a few people in IT on Insider and leaving everyone else on Production, so that fixes and features still arrive promptly. Users cannot change the ring themselves while it is set here.\n\nChoose Unchanged to leave this setting exactly as it is on the device. That is not the same as choosing Production: Unchanged writes nothing at all and leaves the ring up to OneDrive.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-sync-app-update-ring Allowed values: Insider, Production, Deferred, Unchanged.
Sync Health Reporting
Section titled “Sync Health Reporting”Required — Default: Unchanged
Controls whether the device reports its OneDrive health data so it shows up in the administrative sync reports. It has to be switched on for every device you want reports from.\n\nEnable to report health data. Disable to keep the device out of the reports.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-sync-health-reporting-for-onedrive Allowed values: Enabled, Disabled, Unchanged.
Start OneDrive When Signing In To Windows
Section titled “Start OneDrive When Signing In To Windows”Required — Default: Unchanged
Controls whether OneDrive starts by itself when a user signs in to Windows.\n\nEnable to start it automatically. Disable to leave it to the user to start it.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#start-onedrive-automatically-when-signing-in-to-windows Allowed values: Enabled, Disabled, Unchanged.
Disable The Animation During OneDrive Setup
Section titled “Disable The Animation During OneDrive Setup”Required — Default: Unchanged
Controls the animation that plays while a user goes through OneDrive setup.\n\nEnable to skip the animation. Disable to show it.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#disable-animation-that-appears-during-onedrive-setup Allowed values: Enabled, Disabled, Unchanged.
Hide Prompts To Sign In With A Personal Microsoft Account
Section titled “Hide Prompts To Sign In With A Personal Microsoft Account”Required — Default: Unchanged
Controls whether the user is offered the chance to sync their personal files when a personal Microsoft account is found on the device.\n\nEnable to hide those notifications. Users can still set up a personal account by hand unless you also block personal accounts. Disable to show the notifications.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hide-toast-and-activity-center-notifications-that-prompt-users-to-sign-in-to-the-onedrive-sync-app-with-existing-credentials Allowed values: Enabled, Disabled, Unchanged.
Hide The Deleted Files Are Removed Everywhere Reminder
Section titled “Hide The Deleted Files Are Removed Everywhere Reminder”Required — Default: Unchanged
Controls the reminder users see the first time they delete a synced file locally, telling them the file is removed everywhere.\n\nEnable to hide the reminder. Disable to show it until the user ticks the box that hides it.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hide-the-deleted-files-are-removed-everywhere-reminder Allowed values: Enabled, Disabled, Unchanged.
Confirm Before Deleting Shared Content
Section titled “Confirm Before Deleting Shared Content”Required — Default: Unchanged
Controls whether users are asked to confirm when they delete content that is shared with other people.\n\nEnable to ask for confirmation. Disable to delete it without asking.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-to-confirm-when-they-delete-shared-content Allowed values: Enabled, Disabled, Unchanged.
Require Confirmation For Large Delete Operations
Section titled “Require Confirmation For Large Delete Operations”Required — Default: Unchanged
Makes users confirm that they really want the cloud copies removed when they delete a large number of synced files at once. If nobody confirms within seven days, nothing is deleted.\n\nEnable to always show the warning. Disable to let users hide the warning and delete the cloud copies straight away.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#require-users-to-confirm-large-delete-operations Allowed values: Enabled, Disabled, Unchanged.
Prompt Threshold For Deleting Many Files Locally
Section titled “Prompt Threshold For Deleting Many Files Locally”Optional
The number of locally deleted OneDrive files that triggers a notification asking the user whether the cloud copies should go too, or whether the local files should be restored.\n\nEnter a whole number of files between 0 and 100000. Without this setting users are notified after deleting more than 200 files in a short period.\n\nLeave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-when-they-delete-multiple-onedrive-files-on-their-local-computer
Allow Users To Contact Microsoft For Feedback And Support
Section titled “Allow Users To Contact Microsoft For Feedback And Support”Required — Default: Unchanged
Controls whether users can reach Microsoft directly from inside OneDrive to send feedback, answer surveys or ask for support.\n\nEnable to allow all three, which is how OneDrive behaves when the setting is not configured. Disable to remove them, in which case users still keep the help articles and self-help tools.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-users-to-contact-microsoft-for-feedback-and-support Allowed values: Enabled, Disabled, Unchanged.
Always Use The Windows Display Language For Known Folders
Section titled “Always Use The Windows Display Language For Known Folders”Required — Default: Unchanged
Decides which language the Desktop, Documents and Pictures folders are named in when they are set up in OneDrive.\n\nEnable to always use the language Windows is displayed in, even when the user has picked a different preferred language. Disable to use the preferred language when the user has set one.\n\nThis setting is applied both for the device and for every user profile on it. Choose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#always-use-the-users-windows-display-language-when-provisioning-known-folders-in-onedrive Allowed values: Enabled, Disabled, Unchanged.
Continue Syncing On Metered Networks
Section titled “Continue Syncing On Metered Networks”Required — Default: Unchanged
Controls what OneDrive does when the device connects to a metered network, such as a mobile connection.\n\nEnable to keep syncing. Disable to pause syncing automatically and notify the user, who can then choose to sync anyway.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#continue-syncing-on-metered-networks Allowed values: Enabled, Disabled, Unchanged.
Continue Syncing In Battery Saver Mode
Section titled “Continue Syncing In Battery Saver Mode”Required — Default: Unchanged
Controls what OneDrive does when the device switches to battery saver mode.\n\nEnable to keep syncing. Disable to pause syncing automatically and notify the user, who can then choose to sync anyway.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#continue-syncing-when-devices-have-battery-saver-mode-turned-on Allowed values: Enabled, Disabled, Unchanged.
Block Offline Mode In OneDrive On The Web
Section titled “Block Offline Mode In OneDrive On The Web”Optional — Default: Unchanged
Controls whether users may switch on offline mode when they work with OneDrive in a web browser.\n\nChoose Block to take the offline mode option away from everyone on the device. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-at-your-organization-from-enabling-offline-mode-in-onedrive-on-the-web Allowed values: Block, Allow, Unchanged.
Block Offline Mode For Content Shared From Other Organizations
Section titled “Block Offline Mode For Content Shared From Other Organizations”Optional — Default: Unchanged
Controls whether users may switch on offline mode in a web browser for libraries and folders that another organisation has shared with them.\n\nChoose Block to take the offline mode option away for that shared content. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured. Content from your own organisation is not affected either way.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-at-your-organization-from-enabling-offline-mode-in-onedrive-on-the-web-for-libraries-and-folders-that-are-shared-from-other-organizations Allowed values: Block, Allow, Unchanged.
Hard Delete Folder Shortcut Contents On Unmount
Section titled “Hard Delete Folder Shortcut Contents On Unmount”Required — Default: Unchanged
Controls what happens to the files in a folder shortcut when that shortcut is removed from OneDrive.\n\nEnable to delete the contents permanently, without placing them in the recycle bin. Disable to move the contents to the recycle bin, which is how OneDrive behaves when the setting is not configured.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hard-delete-the-contents-of-a-folder-shortcut-when-unmounted Allowed values: Enabled, Disabled, Unchanged.
Hard Delete Folder Shortcut Contents On Permission Loss
Section titled “Hard Delete Folder Shortcut Contents On Permission Loss”Required — Default: Unchanged
Controls what happens to a folder shortcut when the user loses access to the folder it points at.\n\nEnable to delete the folder and its contents permanently as soon as the loss of access is detected. Disable to mark the folder with an error and ask the user to remove it, which moves the contents to the recycle bin.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hard-delete-the-contents-of-a-folder-shortcut-when-user-loses-permissions-to-the-folder Allowed values: Enabled, Disabled, Unchanged.
Allow Disabling Permission Inheritance In Read-Only Folders
Section titled “Allow Disabling Permission Inheritance In Read-Only Folders”Required — Default: Unchanged
Lets OneDrive strip inherited Windows permissions inside folders the user can only read, which makes syncing those folders noticeably faster. It does not change what the user is allowed to see or edit in SharePoint.\n\nEnable to allow it. Disable to leave the inherited permissions alone.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-onedrive-to-disable-windows-permission-inheritance-in-folders-synced-read-only Allowed values: Enabled, Disabled, Unchanged.
Bypass Web Proxy Detection
Section titled “Bypass Web Proxy Detection”Required — Default: Unchanged
Controls whether OneDrive looks for a web proxy before it connects.\n\nEnable to skip proxy detection and connect straight to the internet, which is the same as having no proxy settings and no automatic proxy script at all. Disable to detect a proxy and use it when there is one.\n\nChoose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#configure-the-sync-client-to-bypass-web-proxy-detection Allowed values: Enabled, Disabled, Unchanged.
Modern Authentication For On-Premises SharePoint
Section titled “Modern Authentication For On-Premises SharePoint”Required — Default: Unchanged
Lets OneDrive authenticate against an on-premises SharePoint Server with modern authentication, when the server supports it.\n\nThe SharePoint Server address must be filled in as well. This affects only OneDrive for Business syncing, not team sites in SharePoint Online.\n\nEnable to use modern authentication. Disable to fall back on the older authentication methods the server offers. Choose Unchanged to leave this setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-openid-connect-oidc-authentication-for-syncing-content-from-an-on-prem-sharepoint-server-using-the-onedrive-sync-app Allowed values: Enabled, Disabled, Unchanged.
SharePoint Server Address And Organization Name
Section titled “SharePoint Server Address And Organization Name”Optional
The address of your on-premises SharePoint Server, for organisations running SharePoint Server 2019 and syncing it with the OneDrive app.\n\nEnter the address with a slash at the end. Without the closing slash, setting up syncing can fail even though the address is otherwise correct, and nothing on the device says why.\n\nExample: https://sharepoint.contoso.local/\\n\\nLeave this field empty to leave the setting exactly as it is on the device.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#specify-sharepoint-server-url-and-organization-name
Application ID URI For The On-Premises Entra Application
Section titled “Application ID URI For The On-Premises Entra Application”Optional
The application ID URI of the Entra application used for modern authentication against your on-premises SharePoint Server, for the case where it differs from the SharePoint Server address itself.\n\nExample: https://sharepoint.contoso.local/\\n\\nThis only works when modern authentication for on-premises SharePoint is also switched on, and it affects only OneDrive for Business syncing, not team sites in SharePoint Online. When left empty the SharePoint Server address is used instead.\n\nMicrosoft’s description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#specify-the-application-id-uri-for-your-entra-application-for-oidc
Details
Section titled “Details”- Category: Provisioning
- Brick ID:
OneDrive-Configure
{ "category": "provisioning", "description": "Configures the OneDrive sync app through the OneDrive policies Microsoft documents for the Windows sync app. Use it to sign users in silently, to move the Desktop, Documents and Pictures folders into OneDrive, to control Files On-Demand, bandwidth, exclusions and the folder layout, and to block personal or external accounts.\\n\\nEvery setting has an Unchanged option, and every text field can be left empty. Only the settings you actually choose are written to the device, so this brick can be combined with settings you already manage elsewhere.\\n\\nSettings that belong to the user rather than the device are written for every user profile on the device, including the profile new users are created from.\\n\\nKnown Folder Move is not applied instantly. The folders are moved the next time the user signs in to OneDrive on the device.", "developerVendor": "CapaSystems A/S", "displayName": null, "id": "OneDrive-Configure", "name": "Configure OneDrive", "parameters": [ { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The Microsoft Entra tenant ID of your organisation. Find it in the Microsoft Entra admin center under Overview, or in the Microsoft 365 admin center.\\n\\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\\n\\nThe value can be typed with or without curly braces.\\n\\nWhen do you need it? Some settings are stored per organisation rather than per device: the custom name for the OneDrive folder, the maximum size that downloads automatically, the default location of the OneDrive folder, and whether users may change that location. Fill this in whenever you use one of those. If you use none of them, leave it empty.\\n\\nIf one of those settings is filled in and the Tenant ID is missing or is not a valid ID, the brick fails with a clear message instead of leaving a half finished configuration.", "id": "TenantId", "name": "Tenant ID", "regExValidation": "^(?:\\{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\\}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Signs users in to OneDrive automatically with the Windows account they are already using, so nobody has to type credentials to start syncing. It works on devices that are joined to Microsoft Entra ID, and users are still shown the setup window so they can pick folders and change the location of their OneDrive folder.\\n\\nMicrosoft recommends enabling this. Disable to make users sign in themselves.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-sign-in-users-to-the-onedrive-sync-app-with-their-windows-credentials", "id": "SilentAccountConfig", "name": "Silent Account Configuration", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Lets users see every file in OneDrive in File Explorer without it taking up disk space, and downloads a file only when it is opened. Microsoft recommends keeping this enabled.\\n\\nEnable to switch it on for new setups. Disable to switch it off and stop users from turning it on themselves.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#use-onedrive-files-on-demand", "id": "FilesOnDemandEnabled", "name": "Files On-Demand", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "Moves the Desktop, Documents and Pictures folders into OneDrive without asking the user, so those folders are backed up automatically. The move happens the next time the user signs in to OneDrive on the device, not while this brick runs.\\n\\nEnter the Microsoft Entra tenant ID of your organisation to switch this on. It is the same ID as in the Tenant ID field above.\\n\\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\\n\\nMicrosoft recommends rolling this out to no more than 1,000 existing devices a day and 4,000 a week, and combining it with the setting that prompts users, so anyone the silent move fails for is asked to fix the problem. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive", "id": "KFMOptInNoWizard", "name": "Silently Move Known Folders To OneDrive", "regExValidation": "^(?:\\{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\\}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides whether the silent move includes the Desktop folder. It only has an effect when Silently Move Known Folders is filled in.\\n\\nEnable to move the Desktop folder. Disable to leave it on the device.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive", "id": "KFMSilentOptInDesktop", "name": "Move The Desktop Folder Silently", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides whether the silent move includes the Documents folder. It only has an effect when Silently Move Known Folders is filled in.\\n\\nEnable to move the Documents folder. Disable to leave it on the device.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive", "id": "KFMSilentOptInDocuments", "name": "Move The Documents Folder Silently", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides whether the silent move includes the Pictures folder. It only has an effect when Silently Move Known Folders is filled in.\\n\\nEnable to move the Pictures folder. Disable to leave it on the device.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive", "id": "KFMSilentOptInPictures", "name": "Move The Pictures Folder Silently", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides whether users are told that their folders have been moved. It only has an effect when Silently Move Known Folders is filled in.\\n\\nEnable to show a notification once the folders have been moved. Disable to move them without saying anything.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#silently-move-windows-known-folders-to-onedrive", "id": "KFMSilentOptInWithNotification", "name": "Notify Users After The Silent Move", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "Shows users a window asking them to move their Desktop, Documents and Pictures folders into OneDrive. If they close it, a reminder stays in the activity centre until every folder has been moved.\\n\\nEnter the Microsoft Entra tenant ID of your organisation to switch this on. It is the same ID as in the Tenant ID field above.\\n\\nExample: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\\n\\nUsers who have already pointed their folders at a different OneDrive account are asked to point them at your organisation instead, and the files they left behind stay where they are. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-to-move-windows-known-folders-to-onedrive", "id": "KFMOptInWithWizard", "name": "Prompt Users To Move Known Folders To OneDrive", "regExValidation": "^(?:\\{[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}\\}|[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Keeps the Desktop, Documents and Pictures folders in OneDrive once they have been moved there. The button that stops protecting a folder is switched off, and a user who tries anyway gets an error.\\n\\nEnable to keep the folders protected. Disable to let users move them back to the device.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-redirecting-their-windows-known-folders-to-their-pc", "id": "KFMBlockOptOut", "name": "Block Moving Known Folders Back To The Device", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Stops users from moving their Desktop, Documents and Pictures folders into OneDrive themselves. The prompt to protect those folders is not shown and the backup command is switched off.\\n\\nFolders that have already been moved stay in OneDrive.\\n\\nThis has no effect if you also switch on the setting that moves the known folders silently or the one that prompts the user. Enable to block, disable to let users decide. Choose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-moving-their-windows-known-folders-to-onedrive", "id": "BlockKnownFolderMove", "name": "Block Moving Known Folders To OneDrive", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users may sign in with a personal Microsoft account and sync their private OneDrive files on the device. They are allowed to by default.\\n\\nEnable to block it. Anyone already syncing a personal account is told that syncing has stopped, and the files already on the device stay there. Disable to allow personal accounts again.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-syncing-personal-onedrive-accounts", "id": "DisablePersonalSync", "name": "Block Personal OneDrive Accounts", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users may sync libraries and folders that another organisation has shared with them.\\n\\nEnable to stop that content from syncing. Disable to allow it again.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-syncing-libraries-and-folders-shared-from-other-organizations", "id": "BlockExternalSync", "name": "Block Syncing Content Shared From Other Organizations", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": true, "defaultValue": null, "defaultValueObject": { "id": "", "name": "" }, "description": "A list of the organisations users are allowed to sign in to OneDrive with. Anyone signing in with an account from an organisation that is not on the list gets an error, and files that are already syncing for such an account stop syncing.\\n\\nSpecify one or more organisation IDs. Type each ID and add it to the list as its own entry.\\n\\nExample entry: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\\n\\nThis list wins over the block list, so do not fill in both. Leave this list empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-syncing-onedrive-accounts-for-only-specific-organizations", "id": "AllowTenantList", "name": "Allow Syncing Only For Specific Organizations", "regExValidation": "", "required": false, "type": "MultiSelectComboBox", "value": null, "values": [], "valuesObject": [] }, { "allowManualInput": true, "defaultValue": null, "defaultValueObject": { "id": "", "name": "" }, "description": "A list of the organisations users are not allowed to sign in to OneDrive with. Anyone signing in with an account from one of these organisations gets an error, and files that are already syncing for such an account stop syncing.\\n\\nSpecify one or more organisation IDs. Type each ID and add it to the list as its own entry.\\n\\nExample entry: 3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34\\n\\nThis list is ignored if the allow list is also filled in, so do not fill in both. Leave this list empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#block-syncing-onedrive-accounts-for-specific-organizations", "id": "BlockTenantList", "name": "Block Syncing For Specific Organizations", "regExValidation": "", "required": false, "type": "MultiSelectComboBox", "value": null, "values": [], "valuesObject": [] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether OneDrive may sign itself in using a work account that is already available to other Microsoft apps on the device.\\n\\nEnable to stop OneDrive from signing in on its own. Disable to let it sign in automatically.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-the-sync-app-from-automatically-signing-in-users-with-existing-credentials", "id": "DisableAutoConfig", "name": "Prevent Automatic Sign In With Existing Credentials", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether OneDrive may use the network, for instance to check for updates, before anyone has signed in to it on the device.\\n\\nEnable to keep OneDrive quiet until the user signs in or starts syncing something. Disable to let it start automatically when the user signs in to Windows.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-the-sync-app-from-generating-network-traffic-until-users-sign-in", "id": "PreventNetworkTrafficPreUserSignIn", "name": "Prevent Network Traffic Before Users Sign In", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The name of the local OneDrive folder that is created for new users. By default the folder is named after your organisation, and a shorter name leaves more room for long file and folder names underneath it.\\n\\nExample: OneDrive\\n\\nThe name cannot contain any of the characters \\ / : * ? \" < > |, because Windows does not allow them in a folder name.\\n\\nRequires the Tenant ID field to be filled in. People who are already syncing keep the old name until they disconnect and reconnect their account. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-a-custom-name-for-the-onedrive-folder", "id": "CustomSyncRootFolderName", "name": "Custom Name For The OneDrive Folder", "regExValidation": "^[^\\\\/:*?\"<>|]+$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The folder on the device where the local OneDrive folder is created. Without this setting it is created inside the user profile.\\n\\nExample: D:\\\\OneDrive\\n\\nRequires the Tenant ID field to be filled in. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-default-location-for-the-onedrive-folder", "id": "DefaultRootDir", "name": "Default Location For The OneDrive Folder", "regExValidation": "", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users may choose where their local OneDrive folder is created. When they may not, the link that changes the location is hidden during setup and the folder is created in the default location, or in the location you set above.\\n\\nChoose Prevent to take the choice away from everyone on the device. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured.\\n\\nRequires the Tenant ID field to be filled in.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-from-changing-the-location-of-their-onedrive-folder", "id": "DisableCustomRoot", "name": "Prevent Users From Changing The OneDrive Folder Location", "regExValidation": "", "required": false, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Prevent", "name": "Prevent" }, { "id": "Allow", "name": "Allow" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": true, "defaultValue": null, "defaultValueObject": { "id": "", "name": "" }, "description": "A list of file names or patterns that are never uploaded to OneDrive or SharePoint. The files stay on the device, no error is shown, and matching is not case sensitive. An asterisk stands for any series of characters.\\n\\nSpecify one or more file names or patterns. Pick a suggestion or type your own, and add each entry to the list separately.\\n\\nExample entries: setup.exe and *.pst\\n\\nThis does not remove anything that has already been uploaded, and OneDrive must be restarted before a change takes effect. Leave this list empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#exclude-specific-kinds-of-files-from-being-uploaded", "id": "EnableODIgnoreListFromGPO", "name": "Files Excluded From Upload", "regExValidation": "", "required": false, "type": "MultiSelectComboBox", "value": null, "values": [], "valuesObject": [ { "id": "setup.exe", "name": "setup.exe" }, { "id": "*.pst", "name": "*.pst" } ] }, { "allowManualInput": true, "defaultValue": null, "defaultValueObject": { "id": "", "name": "" }, "description": "A list of folder names that are never uploaded to OneDrive or SharePoint. The folders stay on the device, no error is shown, and matching is not case sensitive. Wildcards are not supported here, so enter complete folder names.\\n\\nSpecify one or more folder names. Pick a suggestion or type your own, and add each folder name to the list as its own entry.\\n\\nExample entry: PowerShell\\n\\nThis does not remove anything that has already been uploaded, and OneDrive must be restarted before a change takes effect. Leave this list empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#exclude-specific-kinds-of-folders-from-being-uploaded", "id": "EnableODIgnoreFolderListFromGPO", "name": "Folders Excluded From Upload", "regExValidation": "", "required": false, "type": "MultiSelectComboBox", "value": null, "values": [], "valuesObject": [ { "id": "PowerShell", "name": "PowerShell" } ] }, { "allowManualInput": true, "defaultValue": null, "defaultValueObject": { "id": "", "name": "" }, "description": "The SharePoint team site libraries that start syncing on their own the next time the user signs in to OneDrive, spread over an eight hour window so the network is not hit all at once. The content is synced as online-only files and the user cannot stop it.\\n\\nSpecify one or more libraries. Write each one as a friendly name, an equals sign, and the whole library ID, and add it to the list as its own entry. The friendly name is only there to identify the library and is yours to choose. The library ID contains equals signs of its own, so only the first one counts as the separator.\\n\\nExample entry: Marketing=tenantId=3d4f2b1a-9c7e-4a52-8b6d-1e0f5a7c9d34&siteId=...&webId=...&listId=...&webUrl=...&version=1\\n\\nWhere do you find the library ID? Sign in as a global administrator or a SharePoint administrator in Microsoft 365, go to the library, and select Sync. In the Starting sync dialog, select the Copy library ID link, then paste it after the equals sign.\\n\\nFiles On-Demand must be switched on, and this does not work for on-premises SharePoint sites. Taking a library back out of this list does not stop it syncing on devices it was already applied to. Leave this list empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#configure-team-site-libraries-to-sync-automatically", "id": "AutoMountTeamSites", "name": "Team Site Libraries That Sync Automatically", "regExValidation": "^[^=]+=.+$", "required": false, "type": "MultiSelectComboBox", "value": null, "values": [], "valuesObject": [] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Turns the files in synced SharePoint team sites into online-only files, so they take up no disk space until someone opens them. This is worth switching on when many devices sync the same team site.\\n\\nFiles On-Demand must be enabled for this to work, and it does not apply to on-premises SharePoint sites.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#convert-synced-team-site-files-to-online-only-files", "id": "DehydrateSyncedTeamSites", "name": "Convert Synced Team Site Files To Online Only", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The amount of free disk space, in megabytes, below which OneDrive stops downloading files.\\n\\nEnter a whole number between 0 and 10240000.\\n\\nExample: 1024\\n\\nLeave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#block-file-downloads-when-users-are-low-on-disk-space", "id": "MinDiskSpaceLimitInMB", "name": "Block Downloads When Disk Space Is Low", "regExValidation": "^(0|[1-9][0-9]{0,6}|10[01][0-9]{5}|102[0-3][0-9]{4}|10240000)$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The amount of free disk space, in megabytes, below which users are warned and offered help to free up space when a download would take them under it.\\n\\nEnter a whole number between 0 and 10240000.\\n\\nExample: 2048\\n\\nLeave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#warn-users-who-are-low-on-disk-space", "id": "WarningMinDiskSpaceLimitInMB", "name": "Warn Users When Disk Space Is Low", "regExValidation": "^(0|[1-9][0-9]{0,6}|10[01][0-9]{5}|102[0-3][0-9]{4}|10240000)$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The size, in megabytes, above which a user is asked to pick which folders to sync instead of having everything downloaded for them. Use it together with silent sign in on devices that do not have Files On-Demand switched on.\\n\\nEnter a whole number of megabytes between 0 and 4294967295. Microsoft's own default is 500.\\n\\nExample: 5000\\n\\nRequires the Tenant ID field to be filled in. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-maximum-size-of-a-users-onedrive-that-can-download-automatically", "id": "DiskSpaceCheckThresholdMB", "name": "Maximum OneDrive Size That Downloads Automatically", "regExValidation": "^(0|[1-9][0-9]{0,8}|[1-3][0-9]{9}|4[01][0-9]{8}|42[0-8][0-9]{7}|429[0-3][0-9]{6}|4294[0-8][0-9]{5}|42949[0-5][0-9]{4}|429496[0-6][0-9]{3}|4294967[01][0-9]{2}|42949672[0-8][0-9]|429496729[0-5])$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Lets OneDrive upload in the background only while there is spare capacity, so it gets out of the way of everything else using the network and speeds up again when the network is quiet.\\n\\nEnable to switch this on and prevent users from changing the upload rate. Disable to let users choose a fixed rate or automatic adjustment themselves.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-automatic-upload-bandwidth-management-for-onedrive", "id": "EnableAutomaticUploadBandwidthManagement", "name": "Automatic Upload Bandwidth Management", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "Limits how much of the available upload capacity OneDrive may use, as a percentage. The lower the number, the slower files are uploaded, and the more capacity is left for everything else on the device.\\n\\nEnter a whole number between 10 and 99. Microsoft recommends 50 or higher. A useful time to set this is while you are rolling out the folder backup settings, so uploading the existing content does not saturate the network.\\n\\nUsers cannot change the limit while it is set here. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-upload-rate-to-a-percentage-of-throughput", "id": "AutomaticUploadBandwidthPercentage", "name": "Upload Rate Limit In Percent Of Throughput", "regExValidation": "^[1-9][0-9]$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "A fixed maximum speed for uploading files, in kilobytes per second. Users cannot change it while it is set here.\\n\\nEnter a whole number between 1 and 100000. Anything below 50 is treated as 50.\\n\\nIf you would rather have OneDrive adjust itself to whatever capacity is free, use Automatic Upload Bandwidth Management instead. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-upload-speed-to-a-fixed-rate", "id": "UploadBandwidthLimit", "name": "Upload Rate Limit In Kilobytes Per Second", "regExValidation": "^([1-9][0-9]{0,4}|100000)$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "A fixed maximum speed for downloading files, in kilobytes per second. It does not apply to downloading updates to OneDrive itself, and users cannot change it while it is set here.\\n\\nEnter a whole number between 1 and 100000. Anything below 50 is treated as 50.\\n\\nMicrosoft recommends using this only where traffic has to be kept strictly under control, such as during the initial rollout, because a permanent limit slows syncing down for everyone. Leave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#limit-the-sync-app-download-speed-to-a-fixed-rate", "id": "DownloadBandwidthLimit", "name": "Download Rate Limit In Kilobytes Per Second", "regExValidation": "^([1-9][0-9]{0,4}|100000)$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides how early a device receives new versions of OneDrive.\\n\\nInsider gets builds that preview features on their way to OneDrive. Production gets the latest features as they become available, and is the ring OneDrive uses by itself when nothing is configured. Deferred gets new features, then bug fixes and performance improvements, last of all, and is the ring that lets you serve updates from a location on your own network and control when they land, within a 60 day window.\\n\\nMicrosoft recommends putting a few people in IT on Insider and leaving everyone else on Production, so that fixes and features still arrive promptly. Users cannot change the ring themselves while it is set here.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device. That is not the same as choosing Production: Unchanged writes nothing at all and leaves the ring up to OneDrive.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#set-the-sync-app-update-ring", "id": "GPOSetUpdateRing", "name": "Sync App Update Ring", "regExValidation": "", "required": false, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Insider", "name": "Insider" }, { "id": "Production", "name": "Production" }, { "id": "Deferred", "name": "Deferred" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether the device reports its OneDrive health data so it shows up in the administrative sync reports. It has to be switched on for every device you want reports from.\\n\\nEnable to report health data. Disable to keep the device out of the reports.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-sync-health-reporting-for-onedrive", "id": "EnableSyncAdminReports", "name": "Sync Health Reporting", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether OneDrive starts by itself when a user signs in to Windows.\\n\\nEnable to start it automatically. Disable to leave it to the user to start it.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#start-onedrive-automatically-when-signing-in-to-windows", "id": "EnableAutoStart", "name": "Start OneDrive When Signing In To Windows", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls the animation that plays while a user goes through OneDrive setup.\\n\\nEnable to skip the animation. Disable to show it.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#disable-animation-that-appears-during-onedrive-setup", "id": "DisableFREAnimation", "name": "Disable The Animation During OneDrive Setup", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether the user is offered the chance to sync their personal files when a personal Microsoft account is found on the device.\\n\\nEnable to hide those notifications. Users can still set up a personal account by hand unless you also block personal accounts. Disable to show the notifications.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hide-toast-and-activity-center-notifications-that-prompt-users-to-sign-in-to-the-onedrive-sync-app-with-existing-credentials", "id": "DisableNewAccountDetection", "name": "Hide Prompts To Sign In With A Personal Microsoft Account", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls the reminder users see the first time they delete a synced file locally, telling them the file is removed everywhere.\\n\\nEnable to hide the reminder. Disable to show it until the user ticks the box that hides it.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hide-the-deleted-files-are-removed-everywhere-reminder", "id": "DisableFirstDeleteDialog", "name": "Hide The Deleted Files Are Removed Everywhere Reminder", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users are asked to confirm when they delete content that is shared with other people.\\n\\nEnable to ask for confirmation. Disable to delete it without asking.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-to-confirm-when-they-delete-shared-content", "id": "SharedContentDeleteConfirmation", "name": "Confirm Before Deleting Shared Content", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Makes users confirm that they really want the cloud copies removed when they delete a large number of synced files at once. If nobody confirms within seven days, nothing is deleted.\\n\\nEnable to always show the warning. Disable to let users hide the warning and delete the cloud copies straight away.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#require-users-to-confirm-large-delete-operations", "id": "ForcedLocalMassDeleteDetection", "name": "Require Confirmation For Large Delete Operations", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The number of locally deleted OneDrive files that triggers a notification asking the user whether the cloud copies should go too, or whether the local files should be restored.\\n\\nEnter a whole number of files between 0 and 100000. Without this setting users are notified after deleting more than 200 files in a short period.\\n\\nLeave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prompt-users-when-they-delete-multiple-onedrive-files-on-their-local-computer", "id": "LocalMassDeleteFileDeleteThreshold", "name": "Prompt Threshold For Deleting Many Files Locally", "regExValidation": "^(0|[1-9][0-9]{0,4}|100000)$", "required": false, "type": "Integer", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users can reach Microsoft directly from inside OneDrive to send feedback, answer surveys or ask for support.\\n\\nEnable to allow all three, which is how OneDrive behaves when the setting is not configured. Disable to remove them, in which case users still keep the help articles and self-help tools.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-users-to-contact-microsoft-for-feedback-and-support", "id": "EnableFeedbackAndSupport", "name": "Allow Users To Contact Microsoft For Feedback And Support", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Decides which language the Desktop, Documents and Pictures folders are named in when they are set up in OneDrive.\\n\\nEnable to always use the language Windows is displayed in, even when the user has picked a different preferred language. Disable to use the preferred language when the user has set one.\\n\\nThis setting is applied both for the device and for every user profile on it. Choose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#always-use-the-users-windows-display-language-when-provisioning-known-folders-in-onedrive", "id": "KFMForceWindowsDisplayLanguage", "name": "Always Use The Windows Display Language For Known Folders", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls what OneDrive does when the device connects to a metered network, such as a mobile connection.\\n\\nEnable to keep syncing. Disable to pause syncing automatically and notify the user, who can then choose to sync anyway.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#continue-syncing-on-metered-networks", "id": "DisablePauseOnMeteredNetwork", "name": "Continue Syncing On Metered Networks", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls what OneDrive does when the device switches to battery saver mode.\\n\\nEnable to keep syncing. Disable to pause syncing automatically and notify the user, who can then choose to sync anyway.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#continue-syncing-when-devices-have-battery-saver-mode-turned-on", "id": "DisablePauseOnBatterySaver", "name": "Continue Syncing In Battery Saver Mode", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users may switch on offline mode when they work with OneDrive in a web browser.\\n\\nChoose Block to take the offline mode option away from everyone on the device. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-at-your-organization-from-enabling-offline-mode-in-onedrive-on-the-web", "id": "DisableOfflineMode", "name": "Block Offline Mode In OneDrive On The Web", "regExValidation": "", "required": false, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Block", "name": "Block" }, { "id": "Allow", "name": "Allow" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether users may switch on offline mode in a web browser for libraries and folders that another organisation has shared with them.\\n\\nChoose Block to take the offline mode option away for that shared content. Choose Allow to give it back, which is how OneDrive behaves when nothing is configured. Content from your own organisation is not affected either way.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#prevent-users-at-your-organization-from-enabling-offline-mode-in-onedrive-on-the-web-for-libraries-and-folders-that-are-shared-from-other-organizations", "id": "DisableOfflineModeForExternalLibraries", "name": "Block Offline Mode For Content Shared From Other Organizations", "regExValidation": "", "required": false, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Block", "name": "Block" }, { "id": "Allow", "name": "Allow" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls what happens to the files in a folder shortcut when that shortcut is removed from OneDrive.\\n\\nEnable to delete the contents permanently, without placing them in the recycle bin. Disable to move the contents to the recycle bin, which is how OneDrive behaves when the setting is not configured.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hard-delete-the-contents-of-a-folder-shortcut-when-unmounted", "id": "AddedFolderHardDeleteOnUnmount", "name": "Hard Delete Folder Shortcut Contents On Unmount", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls what happens to a folder shortcut when the user loses access to the folder it points at.\\n\\nEnable to delete the folder and its contents permanently as soon as the loss of access is detected. Disable to mark the folder with an error and ask the user to remove it, which moves the contents to the recycle bin.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#hard-delete-the-contents-of-a-folder-shortcut-when-user-loses-permissions-to-the-folder", "id": "AddedFolderUnmountOnPermissionsLoss", "name": "Hard Delete Folder Shortcut Contents On Permission Loss", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Lets OneDrive strip inherited Windows permissions inside folders the user can only read, which makes syncing those folders noticeably faster. It does not change what the user is allowed to see or edit in SharePoint.\\n\\nEnable to allow it. Disable to leave the inherited permissions alone.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#allow-onedrive-to-disable-windows-permission-inheritance-in-folders-synced-read-only", "id": "PermitDisablePermissionInheritance", "name": "Allow Disabling Permission Inheritance In Read-Only Folders", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Controls whether OneDrive looks for a web proxy before it connects.\\n\\nEnable to skip proxy detection and connect straight to the internet, which is the same as having no proxy settings and no automatic proxy script at all. Disable to detect a proxy and use it when there is one.\\n\\nChoose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#configure-the-sync-client-to-bypass-web-proxy-detection", "id": "IgnoreWebProxy", "name": "Bypass Web Proxy Detection", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": null, "defaultValueObject": { "id": "Unchanged", "name": "Unchanged" }, "description": "Lets OneDrive authenticate against an on-premises SharePoint Server with modern authentication, when the server supports it.\\n\\nThe SharePoint Server address must be filled in as well. This affects only OneDrive for Business syncing, not team sites in SharePoint Online.\\n\\nEnable to use modern authentication. Disable to fall back on the older authentication methods the server offers. Choose Unchanged to leave this setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#enable-openid-connect-oidc-authentication-for-syncing-content-from-an-on-prem-sharepoint-server-using-the-onedrive-sync-app", "id": "SharePointOnPremOIDC", "name": "Modern Authentication For On-Premises SharePoint", "regExValidation": "", "required": true, "type": "ComboBox", "value": null, "values": [], "valuesObject": [ { "id": "Enabled", "name": "Enabled" }, { "id": "Disabled", "name": "Disabled" }, { "id": "Unchanged", "name": "Unchanged" } ] }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The address of your on-premises SharePoint Server, for organisations running SharePoint Server 2019 and syncing it with the OneDrive app.\\n\\nEnter the address with a slash at the end. Without the closing slash, setting up syncing can fail even though the address is otherwise correct, and nothing on the device says why.\\n\\nExample: https://sharepoint.contoso.local/\\n\\nLeave this field empty to leave the setting exactly as it is on the device.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#specify-sharepoint-server-url-and-organization-name", "id": "SharePointOnPremFrontDoorUrl", "name": "SharePoint Server Address And Organization Name", "regExValidation": "^[Hh][Tt][Tt][Pp][Ss]?://[^\\s?#]+/$", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null }, { "allowManualInput": false, "defaultValue": "", "defaultValueObject": null, "description": "The application ID URI of the Entra application used for modern authentication against your on-premises SharePoint Server, for the case where it differs from the SharePoint Server address itself.\\n\\nExample: https://sharepoint.contoso.local/\\n\\nThis only works when modern authentication for on-premises SharePoint is also switched on, and it affects only OneDrive for Business syncing, not team sites in SharePoint Online. When left empty the SharePoint Server address is used instead.\\n\\nMicrosoft's description of this setting: https://learn.microsoft.com/en-us/sharepoint/use-group-policy#specify-the-application-id-uri-for-your-entra-application-for-oidc", "id": "SharePointOnPremApplicationIdUri", "name": "Application ID URI For The On-Premises Entra Application", "regExValidation": "", "required": false, "type": "TextBox", "value": null, "values": [], "valuesObject": null } ], "powershell": { "base64Encoded": true, "function": "ZnVuY3Rpb2..." }, "type": "powerbrick", "version": "2026.10.8.1"}