OneDrive for Business Windows startup uses the wrong account for managed laptops: Fix Guide

When you sign in to a managed laptop, OneDrive for Business may start automatically using a personal Microsoft account instead of your work or school account. This happens because the Windows credential manager or Group Policy settings store the wrong account token, or because the OneDrive setup wizard ran with cached credentials from a previous user session. This guide explains why OneDrive picks the wrong account at startup and provides step-by-step fixes to force the correct work account for all users on the device.

Why OneDrive Starts with the Wrong Account on Managed Laptops

OneDrive for Business stores the last successfully signed-in account in the Windows Credential Manager under the Windows Credentials section. When Windows starts, OneDrive reads this cached token and uses it to sign in automatically. If a personal Microsoft account was used previously — for example, during initial setup or by another user — OneDrive will load that account instead of the work account.

On managed laptops joined to a domain or enrolled in Microsoft Intune, Group Policy or mobile device management settings may also influence the sign-in behavior. The policy “Silently sign in users to the OneDrive sync app with their Windows credentials” is designed to force OneDrive to use the domain account, but if this policy is not enabled or is misconfigured, OneDrive falls back to the last cached account.

Another cause is the OneDrive registry key that stores the account GUID under HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts\Business1. If this key contains a GUID that does not match the correct Azure AD tenant, OneDrive will attempt to sign in with the wrong identity. The fix requires clearing both the credential manager entry and the registry key to reset the account association.

Steps to Force OneDrive to Use the Correct Work Account at Startup

Perform the following steps in order. You need local administrator rights on the managed laptop to edit the registry and credential manager. If the device is locked down by IT policy, you may need to request an exception or use the Group Policy method instead.

Method 1: Clear Cached Credentials from Windows Credential Manager

1. Open Credential Manager
   Press the Windows key, type Credential Manager, and press Enter.
2. Switch to Windows Credentials
   Click Windows Credentials in the top navigation bar.
3. Locate OneDrive entries
   Scroll to the section labeled Generic Credentials. Look for entries that contain “OneDrive” or “MicrosoftOffice16” in the name.
4. Remove each OneDrive credential
   Click the arrow to expand the entry, then click Remove. Confirm the deletion. Repeat for all OneDrive-related entries.
5. Sign out of OneDrive
   Right-click the OneDrive cloud icon in the system tray and select Help & Settings > Settings. Under the Account tab, click Unlink this PC. Confirm the action.
6. Restart the laptop
   Reboot Windows. After restart, OneDrive should prompt you to sign in. Enter your work or school account credentials.

Method 2: Remove the Account GUID from the Registry

1. Open Registry Editor
   Press the Windows key, type regedit, and press Enter. Click Yes in the User Account Control prompt.
2. Navigate to the OneDrive accounts key
   Go to HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts. Expand the Accounts folder.
3. Identify the wrong account
   Under Accounts, you see subkeys named Business1, Personal, or similar. Click each subkey and look at the AccountId value in the right pane. The AccountId is a GUID that corresponds to the user’s Azure AD tenant or personal Microsoft account.
4. Delete the wrong account subkey
   Right-click the subkey that contains the wrong account GUID, for example Personal, and select Delete. Confirm the deletion.
5. Close Registry Editor and restart OneDrive
   Press Ctrl + Alt + Delete and select Sign out. Sign in again with your work account. OneDrive should now show the correct account.

Method 3: Enable Group Policy to Silently Sign In with Windows Credentials

1. Open Local Group Policy Editor
   Press the Windows key, type gpedit.msc, and press Enter. If the device is managed by Intune or a domain, the settings may be locked; contact your IT administrator.
2. Navigate to OneDrive administrative templates
   Go to Computer Configuration > Administrative Templates > OneDrive. If the OneDrive templates are missing, download and install the OneDrive Group Policy files from Microsoft.
3. Enable silent sign-in
   Double-click Silently sign in users to the OneDrive sync app with their Windows credentials. Select Enabled and click OK.
4. Force a Group Policy update
   Open Command Prompt as administrator and run gpupdate /force. Restart the laptop.
5. Sign in with the work account once
   After restart, sign in to OneDrive manually with your work or school account. On subsequent startups, OneDrive will use the Windows sign-in credentials automatically.

If OneDrive Still Uses the Wrong Account After the Main Fix

OneDrive keeps reverting to a personal account after each restart

This usually means the registry key was not fully cleared or the credential manager still contains a hidden entry. Open Credential Manager again and look for any entry that contains “MicrosoftAccount” or “LiveId”. Remove all such entries. Then delete the entire HKEY_CURRENT_USER\Software\Microsoft\OneDrive\Accounts key and restart. OneDrive will recreate the key with the correct account on next sign-in.

The Group Policy setting “Silently sign in” is grayed out or missing

The OneDrive administrative template files are not installed on the device. Download the latest OneDrive Group Policy ADMX files from the Microsoft Download Center. Copy the OneDrive.admx file to C:\Windows\PolicyDefinitions and the OneDrive.adml file to the corresponding language folder. Restart Group Policy Editor and the setting will appear.

OneDrive shows “Account not found” after clearing credentials

This error occurs if the Azure AD tenant is not properly configured for OneDrive. Verify that the user has a valid OneDrive for Business license assigned. In the Microsoft 365 admin center, go to Users > Active Users, select the user, and check the Licenses and Apps tab. Ensure OneDrive for Business is toggled on. After confirming, sign in to OneDrive again.

Manual Account Reset vs Group Policy Silent Sign-In: Key Differences

Item	Manual Account Reset (Methods 1 and 2)	Group Policy Silent Sign-In (Method 3)
Scope	Single user profile	All users on the device
Requires admin rights	Yes, for registry edits	Yes, for Group Policy changes
Persistence after restart	Lasts until another account is cached	Persistent until policy is changed
Effect on existing files	Requires re-sync after unlinking	No re-sync needed if account matches
Best for	Quick fix on one laptop	Enterprise deployment with many devices

Now you can force OneDrive to start with the correct work account on any managed laptop. Begin with the credential manager cleanup and registry edit for immediate results. For long-term control, enable the silent sign-in Group Policy setting. As an advanced tip, use the OneDriveSetup.exe /silent command with the /tenant parameter to pre-configure the correct tenant during OS deployment.