Then paste in your Tenant ID and decide if you do or do not want to show the notification to your users that IT is cool and backed up their stuff. In the results, select the “ Silently move Windows known folders to OneDrive” setting from the OneDrive path and Enable it. Give the policy a name like “OneDrive KFM”, then search for “silently”. From there select Windows 10 and use the “ Administrative Templates” profile. Go to Devices / Windows / Configuration profiles / Create profile. Then load the Intune / Endpoint Manager portal at

To get your Tenant ID, go to the Azure AD Portal at and copy it to your clipboard. Simply assign a Configuration Policy to the device to configure the OneDrive agent to use your company Tenant and auto-sign-in using the same account used to log in to Windows. So if your organization is already using Office 365, there is no real need to install anything, just make sure the users have an Office 365 license that grants them use of OneDrive of Business.

While you can download the OneDrive agent separately from Office, Windows 10 comes with OneDrive already installed, and it is updated as part of the OS. A lot of the guidance you’ll find out there is on how to use GPO for this, but I’ll show you how to do it using Intune in a way that works easily for your AAD Joined, Autopilot deployed devices too. This is called “ OneDrive Known Folder Move” or sometimes “ OneDrive PC Folder Backup” depending on your mood. We can easily configure these “Special Folders” to be synchronized to their own cloud storage in Office 365 without needing to install anything and without needing to ask the user to even sign in. Protecting user data is a pretty big deal, and some of the most common places users store their “important stuff” is in their Documents folder, Pictures library, and of course, the Desktop.

How to turn off onedrive auto sync