OneDrive Admin Checklist: Known Folder Move fails before setup completes for domain profile migrations

When you migrate user profiles between domain accounts or to a new Windows device, Known Folder Move often fails before the setup wizard finishes. The error appears as a grayed-out protection status or a red banner that says Known Folder Move could not redirect your folders. This failure usually occurs because the existing folder structure, registry keys, or file paths from the old profile conflict with the new domain account. This article explains the specific root causes of this failure and provides a step-by-step checklist for administrators to resolve the issue without losing user data.

Why Known Folder Move fails during domain profile migrations

Known Folder Move redirects the Desktop, Documents, and Pictures folders to OneDrive. During a domain profile migration, the user logs in with a new domain account on the same or different machine. The old folders still have security descriptors tied to the previous account. OneDrive’s setup wizard attempts to move the folders but cannot access them because the new account lacks the required permissions.

Another common cause is a stale registry entry from a previous OneDrive configuration. The registry key HKCU\Software\Microsoft\OneDrive\Accounts\Business1 may contain a tenant ID or folder path that no longer matches the current environment. When OneDrive reads this key during setup, it tries to validate the folder location and fails.

A third cause is a path conflict. If the old Desktop or Documents folder is located on a drive other than C:\Users\[NewUsername], or if the folder names contain characters like spaces or hyphens that OneDrive cannot process, the sync engine stops before the move completes.

How OneDrive signals the failure

The user sees a notification that says Known Folder Move could not be completed. In the OneDrive Settings > Sync and backup > Manage backup, the status shows a red X or a grayed-out toggle. The admin can also check the OneDrive sync logs in %localappdata%\Microsoft\OneDrive\logs for entries containing KFM failed or access denied.

Checklist to resolve Known Folder Move failures before setup completes

Use this checklist in the order listed. Each step addresses one of the root causes described above. Run these steps on the user’s machine while logged in with the new domain account.

1. Verify tenant policy in the OneDrive admin center
   Go to the Microsoft 365 admin center > Settings > Org settings > OneDrive > Sync. Under Known Folder Move, confirm the policy is set to Enabled and the correct security groups are listed. If the policy is set to Disabled or Not configured, Known Folder Move will not start. Apply the change and wait 15 minutes for replication.
2. Check Group Policy Object settings
   On the user’s machine, open the Registry Editor and navigate to HKLM\Software\Policies\Microsoft\OneDrive. Verify these values exist:
   – KFMEnabled = 1
   – SilentAccountConfig = 1
   – DisableKFMForNonAdminUsers = 0
   If any value is missing or incorrect, update the GPO from the domain controller and run gpupdate /force on the client.
3. Reset folder permissions with icacls
   Open Command Prompt as Administrator. For each folder Desktop, Documents, and Pictures, run:
   icacls "C:\Users\[OldUsername]\Desktop" /reset /t
icacls "C:\Users\[OldUsername]\Desktop" /grant "[NewDomain]\[NewUsername]":(OI)(CI)F
   Replace [OldUsername], [NewDomain], and [NewUsername] with the actual values. Repeat for Documents and Pictures.
4. Remove stale OneDrive registry keys
   Press Windows key + R, type regedit, and press Enter. Navigate to HKCU\Software\Microsoft\OneDrive\Accounts\Business1. If this key exists, right-click it and select Export to back it up, then delete it. Restart OneDrive. The setup wizard will recreate the key with the correct tenant information.
5. Rename or move conflicting folder paths
   If the old Desktop or Documents folder is on a different drive, or if the folder name contains spaces or special characters, rename the folder to a simple name like Desktop_old. Use File Explorer to rename the folder, then restart OneDrive. The setup wizard will create a new folder in the correct location.
6. Clear OneDrive cached credentials
   Open Credential Manager (Control Panel > User Accounts > Credential Manager). Under Windows Credentials, look for entries that contain OneDrive or MicrosoftOffice15. Remove them. Restart OneDrive and sign in again.
7. Run the OneDrive setup wizard manually
   Right-click the OneDrive icon in the system tray and select Settings. Go to the Sync and backup tab and click Manage backup. Select the folders you want to protect and click Start protection. If the wizard still fails, check the sync log for the exact error code.

If OneDrive still fails after completing the checklist

If Known Folder Move continues to fail, the issue may be related to file-level conflicts or a corrupted local OneDrive installation. Use the following sub-sections to diagnose and fix specific failure patterns.

OneDrive reports access denied on a single file

Open File Explorer and navigate to the folder that failed. Look for files with a lock icon or files that are open in another program. Close all Office applications. Use the handle64 tool from Sysinternals to find which process has the file locked. Terminate the process, then restart OneDrive.

OneDrive shows error 0x80070005 during Known Folder Move

This error indicates a permissions issue at the folder level. Run the icacls command from step 3 again, but this time also include the /inheritance:e flag to enable permission inheritance from the parent folder. Then restart OneDrive and attempt the move again.

Known Folder Move works for Desktop but not Documents

This usually means the Documents folder contains a file or subfolder with a path longer than 260 characters. Use the robocopy command with the /L flag to list files that exceed the path length limit. Rename or move those files to a shorter path, then retry Known Folder Move.

Known Folder Move vs manual folder redirection: Key differences for domain migrations

Item	Known Folder Move	Manual folder redirection
Setup method	OneDrive wizard or GPO	Folder Properties > Location tab or Group Policy Folder Redirection
Permission handling	OneDrive sets permissions automatically during move	Admin must manually set NTFS permissions and share permissions
Conflict resolution	Fails if permissions or paths conflict	Can be configured to move or copy files even with conflicts
Sync status visibility	Visible in OneDrive Settings > Manage backup	No sync status; files are redirected but not synced unless OneDrive sync is separately configured
Recovery after migration	Requires re-running the wizard or resetting OneDrive	Folder redirection policy can be updated without reinstalling OneDrive

After completing the checklist, Known Folder Move should complete without errors. The user will see a green checkmark next to Desktop, Documents, and Pictures in the Manage backup screen. To prevent future failures, run the checklist as a pre-migration step before the user signs in for the first time. Use the OneDriveSetup.exe /silent command with the correct tenant ID to automate the initial configuration. For advanced troubleshooting, enable debug logging by setting the registry key HKCU\Software\Microsoft\OneDrive\EnableLogging to 1 before running the wizard.