How to Configure OneDrive for Shared Windows Devices

When multiple people use the same Windows 10 or Windows 11 computer, OneDrive can cause confusion if each user sees the same files or if personal accounts get mixed with work accounts. Shared devices such as lab computers, conference room PCs, or shift-work stations need a setup that keeps each user’s OneDrive separate and secure. This article explains how to configure OneDrive on a shared Windows device using per-user configuration policies, Microsoft 365 admin settings, and local group policies. You will learn the exact steps to prevent file overlap, restrict personal account sign-in, and enforce consistent sync behavior for every person who logs in.

Understanding OneDrive Behavior on Shared Windows Devices

By default, OneDrive for Business is installed per user. Each Windows user account gets its own OneDrive folder located at C:\Users\[username]\OneDrive - [tenant name]. This separation prevents one person’s files from appearing in another person’s File Explorer view. However, problems arise when OneDrive starts automatically for every user who logs in, when personal Microsoft accounts are allowed on a shared machine, or when the OneDrive sync app runs in the background and consumes system resources for multiple users simultaneously.

The root cause of most shared-device issues is the default per-user installation model combined with automatic startup. When a shared computer has ten users, ten OneDrive processes can launch, each attempting to sync its own library. This can slow down the device and cause sync conflicts if users accidentally sign in to the wrong account. The configuration methods described in this article address these problems by:

• Installing OneDrive in per-machine mode so it is registered once for all users
• Disabling OneDrive automatic startup for new users
• Restricting sign-in to work or school accounts only
• Enforcing a silent configuration that users cannot change

Steps to Configure OneDrive for Shared Windows Devices

Follow these steps in order. You need local administrator rights on the Windows device and access to the Microsoft 365 admin center for tenant-level policies.

Step 1: Install OneDrive in Per-Machine Mode

1. Download the correct OneDrive installer
   Go to Microsoft’s OneDrive download page and get the OneDriveSetup.exe file. For per-machine installation, use the command-line switch /allusers. Do not run the installer by double-clicking it yet.
2. Open an elevated Command Prompt
   Right-click the Start button and select Command Prompt (Admin) or Windows PowerShell (Admin). Confirm the User Account Control prompt.
3. Run the installer with the per-machine switch
   Type the full path to the installer followed by /allusers. Example: C:\Users\Admin\Downloads\OneDriveSetup.exe /allusers. Press Enter. The installation proceeds silently and registers OneDrive for all users on the device.
4. Verify the installation
   Open File Explorer and navigate to C:\Program Files\Microsoft OneDrive\. If the folder exists and contains OneDrive.exe, the per-machine installation succeeded.

Step 2: Disable OneDrive Automatic Startup for New Users

1. Open the Local Group Policy Editor
   Press Windows + R, type gpedit.msc, and press Enter. If the device runs Windows 10 or 11 Home edition, you must install the Group Policy Management feature first.
2. Navigate to the OneDrive policy folder
   Go to Computer Configuration > Administrative Templates > OneDrive. If you do not see a OneDrive folder, download and install the OneDrive Group Policy administrative templates from the Microsoft Download Center.
3. Enable the policy to prevent automatic startup
   Double-click Prevent the usage of OneDrive for file storage. Select Enabled. This policy hides OneDrive from File Explorer and stops it from starting automatically. Click OK.
4. Alternatively, use a registry edit
   If Group Policy is not available, open Registry Editor and go to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive. Create a DWORD named DisableFileSyncNGSC and set its value to 1. Restart the computer.

Step 3: Restrict Sign-In to Work or School Accounts Only

1. Open the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with a Global Admin or SharePoint admin account.
2. Navigate to OneDrive settings
   In the left navigation, expand Settings and select Org settings. On the Org settings page, click OneDrive.
3. Disable personal account sync
   Under the Sync tab, find the option Block sync of personal OneDrive accounts on this organization’s devices. Select this checkbox. This prevents users from signing in to a personal Microsoft account on shared devices that are joined to your Azure AD tenant.
4. Save the changes
   Click Save at the bottom of the settings page. The change applies to all devices that are Azure AD-joined or hybrid-joined within your organization.

Step 4: Configure Known Folder Move for Shared Devices

1. Understand the limitation
   Known Folder Move redirects the Desktop, Documents, and Pictures folders to OneDrive. On a shared device, each user must configure this individually. Do not enable Known Folder Move via Group Policy on a shared machine because it applies the same folder path to all users, causing conflicts.
2. Let users configure it themselves
   After a user signs in to OneDrive on the shared device, they can right-click the OneDrive icon in the system tray, select Settings, go to the Sync and backup tab, and click Manage backup. They then choose which folders to protect. This per-user setup preserves file separation.

Step 5: Test the Configuration with a New User Account

1. Create a test local user
   Open Settings > Accounts > Family & other users. Click Add someone else to this PC and create a local user account.
2. Sign in as the test user
   Switch user accounts and log in with the new test account. Open File Explorer and confirm that OneDrive does not appear in the navigation pane automatically.
3. Manually start OneDrive
   Search for OneDrive in the Start menu and open it. Sign in with a valid work or school account. Verify that the sync folder is created under C:\Users\[testuser]\OneDrive - [tenant name] and that personal account sign-in is blocked.

Common Issues When Configuring OneDrive on Shared Devices

OneDrive Still Starts Automatically After Group Policy Is Set

The Group Policy setting Prevent the usage of OneDrive for file storage may take up to 90 minutes to apply, or the device may not have received the policy refresh. Run gpupdate /force in an elevated Command Prompt to force an immediate update. If the policy still does not apply, verify that the administrative template file OneDrive.admx is present in C:\Windows\PolicyDefinitions.

Users Can Still Sign In with a Personal Account

The tenant-level setting to block personal account sync only applies to devices that are Azure AD-joined or hybrid-joined. If the shared device is not joined to Azure AD, the setting has no effect. Join the device to Azure AD by going to Settings > Accounts > Access Work or School > Connect and signing in with a work account. After the device is joined, the policy takes effect.

Multiple OneDrive Processes Run Even After Configuration

If you installed OneDrive in per-user mode before switching to per-machine mode, residual registry entries may cause multiple instances. Uninstall OneDrive completely from Settings > Apps > Apps & features, then reinstall using the /allusers switch as described in Step 1. Also remove the HKEY_CURRENT_USER\Software\Microsoft\OneDrive registry key for each user profile that previously ran OneDrive.

Per-Machine vs Per-User OneDrive Installation: Key Differences

Item	Per-Machine Installation	Per-User Installation
Install location	C:\Program Files\Microsoft OneDrive	C:\Users\[user]\AppData\Local\Microsoft\OneDrive
Automatic startup per user	Can be disabled via Group Policy	Enabled by default for each user
Recommended for shared devices	Yes	No
Update behavior	Updates apply to all users at once	Each user updates separately

Configuring OneDrive for shared Windows devices requires a deliberate choice between per-machine and per-user installation. The per-machine model combined with Group Policy restrictions gives administrators control over startup behavior and account types. After you apply these settings, each person who signs in to the shared computer gets a clean OneDrive experience without interfering with other users. Test the configuration with a dummy account before deploying to production. For advanced environments, consider using Microsoft Intune to deploy the OneDrive policies to a fleet of shared devices automatically.