Show the Sync button on the OneDrive website – Enabled
Allow syncing only on PCs joined to specific domains Enabled|
Block syncing of specific file types Enabled: PST, OST
Days to retain files in OneDrive after a user account is marked for deletion 3650 (10 years)
Unmanaged Devices – Allow limited, web-only access
Control access from apps that can’t enforce device-based restrictions: Allow access from apps that don’t use modern authentication – Block Access
Display device notifications to users when OneDrive files are shared with them – Enabled
Other users invite additional external users to shared files – Enabled
External users accept invitations to access files – Enabled
An anonymous access link is created or changed – Enabled
| Registry Key | Description | Enabling this policy |
| KFMOptInWithWizard | Prompt users to move Windows known folders to OneDrive | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMOptInWithWizard”=“{Tenant ID}” |
| KFMBlockOptOut | Prevent users from redirecting their Windows known folders to their PC. Enable to disable the “Stop protecting” button. | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMBlockOptOut”=”dword:00000001″ |
| KFM0OptIn | Silently move Windows known folders to OneDrive. Use this setting to redirect your users’ Documents, Pictures, and Desktop folders to OneDrive without any user interaction. | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMSilentOptIn”=“{Tenant ID}” |
| KFMSilentOptInWithNotification | Notify user after successful folder redirection. | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMSilentOptInWithNotification“ = “dword:00000001″ |
| AutomaticUploadBandwidthPercentage | Limit the sync client upload rate to a percentage of throughput. Recommend setting when enabling KFMSilentOptIn or KFMOptInWithWizardsilently. | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”AutomaticUploadBandwidthPercentage”=”dword:000000?32“ Hexadecimal 32 = Decimal 50 or 50% of throughput |
| FilesOnDemandEnabled | Use OneDrive Files On-Demand. This setting lets you control whether OneDrive Files On-Demand is enabled for your organization. | [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”FilesOnDemandEnabled”=”dword:00000001″ |
| GPO Settings | Recommended Setting |
| Allow OneDrive to disable Windows permission inheritance in folders synced read-only Enabling this policy sets the following registry key value to 1: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”PermitDisablePermissionInheritance”=”dword:00000001″ | Enabled |
| Allow syncing OneDrive accounts for only specific organizations This policy sets the following registry key: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive\AllowTenantList] “{Tenant ID}” | Enabled |
| Allow users to choose how to handle Office file sync conflicts | Enabled |
| Block file downloads when users are low on disk space Enabling this policy sets the following registry key value to a number from 0 through 10240000. [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]” MinDiskSpaceLimitInMB | 10000 MB |
| Block syncing OneDrive accounts for specific organizations | Not Configured |
| Co-author and share in Office desktop apps Enabling this policy sets the following registry key value to 1: [HKCU\SOFTWARE\Policies\Microsoft\OneDrive] ?”EnableAllOcsiClients”=”dword:00000001″ | Enabled |
| Convert synced team site files to online-only files Enabling this policy sets the following registry key value to 1. [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”DehydrateSyncedTeamSites”=”dword:00000001″ | Enabled |
| Enable automatic upload bandwidth management for OneDrive Important: If you enable or disable this setting, and then change it back to Not Configured, the last configuration will remain in effect. We recommend enabling this setting instead of “Limit the sync app upload speed to a fixed rate.” You should not enable both settings at the same time. This setting will override “Limit the sync app upload rate to a percentage of throughput” if both are enabled on the same device. | Enabled |
| Limit the sync app upload rate to a percentage of throughput Enabling this policy sets the following registry key value. For example: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”AutomaticUploadBandwidthPercentage”=”dword:000000?32″ The previous registry key sets the upload throughput percentage to 50%, using the hexadecimal value for 50, which is 00000032. | Enabled 30%? |
| Prevent the sync app from generating network traffic until users sign in If you disable or do not configure this setting, the OneDrive sync app starts automatically when users sign-in to Windows. | Disabled |
| Prevent users from fetching files remotely If you disable or do not configure both this setting and Prevent users from syncing personal OneDrive accounts, users can use the fetch feature. | Enabled |
| Prevent users from moving their Windows known folders to OneDrive This setting does not take effect if you have enabled “Prompt users to move Windows known folders to OneDrive” or “Silently move Windows known folders to OneDrive.” | Disabled |
| Prevent users from redirecting their Windows known folders to their PC Enabling this policy sets the following registry key: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMBlockOptOut”=”dword:00000001″ | Enabled |
| Prevent users from syncing libraries and folders shared from other organizations | Enabled |
| Configure team site libraries to sync automatically | Disabled |
| Continue syncing on metered networks If you disable or do not configure this setting, syncing pauses automatically when a metered network is detected, and a notification appears. When syncing is paused, to resume syncing, in the notification area of the taskbar, select the OneDrive cloud icon, and at the top of the Activity Center, select the alert. | Disabled |
| Continue syncing when devices have battery saver mode turned on | Disabled |
| Disable the tutorial that appears at the end of OneDrive Setup Cater for tutorials and training via the comms (change management) | Enabled |
| Limit the sync app download speed to a fixed rate * The lower the rate, the slower the files download | Disabled |
| Limit the sync app upload speed to a fixed rate | Disabled |
| Prevent users from changing the location of their OneDrive folder Enabling this policy sets the following registry key value to 1. [HKCU\Software\Policies\Microsoft\OneDrive\DisableCustomRoot] “{Tenant ID}””=”dword:00000001” | Enabled |
| Prevent users from syncing personal OneDrive accounts | Enabled |
| Prompt users to move Windows known folders to OneDrive Enabling this policy sets the following registry key: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMOptInWithWizard”=”{Tenant ID}” | Disabled |
| Receive OneDrive sync app updates on the Deferred ring | Disabled |
| Require users to confirm large delete operations | Enabled |
| Set the default location for the OneDrive folder | Disabled |
| Set the maximum size of a user’s OneDrive that can download automatically (Default: 500MB) This setting is used in conjunction with Silently sign in users to the OneDrive sync app with their Windows credentials on devices that don’t have OneDrive Files On-Demand enabled. Any user who has a OneDrive that’s larger than the specified threshold (in MB) is prompted to choose the folders they want to sync before the OneDrive sync app (OneDrive.exe) downloads the files. Applicable to devices without the FOD feature, Windows 7 Enabling this policy sets the following registry key. [HKLM\SOFTWARE\Policies\Microsoft\OneDrive\DiskSpaceCheckThresholdMB]” {Tenant ID}”=dword:0003000 (0003000 sets a threshold of 3000 MB). | 3GB |
| Set the sync app update ring Enabling this policy sets the following registry key: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”GPOSetUpdateRing”=”dword:0000000X” | 5 |
| Silently move Windows known folders to OneDrive Enabling this policy sets the following registry keys: [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMSilentOptIn”=”{Tenant ID}” [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”KFMSilentOptInWithNotification” Setting this value to 1 shows a notification after successful redirection. | Enabled |
| Silently sign in users to the OneDrive sync app with their Windows credentials | Enabled |
| Use OneDrive Files On-Demand Enabling this policy sets the following registry key value to 1. [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]”FilesOnDemandEnabled”=”dword:00000001″ | Enabled |
| Warn users who are low on disk space Enabling this policy sets the following registry key value to a number from 0 through 10240000. [HKLM\SOFTWARE\Policies\Microsoft\OneDrive]” WarningMinDiskSpaceLimitInMB” | 10 GB Enabled |
Loading...