OneDrive Admin Checklist: Known Folder Move fails before setup completes for remote staff
🔍 WiseChecker

OneDrive Admin Checklist: Known Folder Move fails before setup completes for remote staff

When you configure Known Folder Move for remote staff, the setup can fail before it finishes. This failure often occurs because the user’s device is not domain-joined, network latency interrupts the initial sync, or group policy settings are missing. This article explains the root causes of Known Folder Move failure during the first sync attempt for remote workers and provides a step-by-step checklist to resolve the issue.

Remote staff frequently connect through VPNs or personal networks, which can block the required OneDrive endpoints or introduce delays. Incomplete prerequisite checks are another common reason the move does not start. By following the checklist below, you can identify which condition is blocking the move and apply the correct fix without reimaging the device.

The checklist covers network configuration, registry settings, and tenant policies that must be in place before Known Folder Move can run. You will also learn how to verify that the move completed successfully on a remote machine.

Key Takeaways: Known Folder Move Failure on Remote Devices

  • OneDrive admin center > Sync > Known Folder Move: Tenant-wide toggle that must be enabled for the feature to work on any device.
  • Group Policy > Computer Configuration > Administrative Templates > OneDrive > Silently move Windows known folders: Policy that forces the move without user interaction; missing policy causes setup to stop.
  • OneDrive.exe /configure (command line): Silent configuration tool that applies Known Folder Move settings without requiring a restart.

ADVERTISEMENT

Why Known Folder Move Fails Before Setup Completes on Remote Staff Machines

Known Folder Move redirects the Desktop, Documents, and Pictures folders to OneDrive. The feature is designed for domain-joined devices that connect to the corporate network directly. Remote staff often use devices that are Azure AD joined or personal machines not joined to any domain. In these scenarios, the following root causes block the move:

Network endpoints not reachable. OneDrive must communicate with onedrive.live.com, login.microsoftonline.com, and tenant-specific URLs. Remote VPNs or firewalls sometimes block these endpoints, causing the initial sync to time out.

Group Policy not applied. The policy “Silently move Windows known folders to OneDrive” is required for automatic redirection. Remote devices that are not domain-joined do not receive this policy from on-premises Active Directory.

User consent not given. When the tenant policy requires user consent, remote staff must click “Start backup” in the OneDrive Settings > Backup tab. If the user skips this step, the move does not start.

Checklist: Verify and Fix Known Folder Move on Remote Devices

Use this checklist in order. Each step identifies a specific condition that prevents the move from completing. After applying a fix, recheck the OneDrive backup status before moving to the next step.

Step 1: Confirm Tenant Policy Is Enabled

  1. Open the Microsoft 365 admin center
    Go to admin.microsoft.com and sign in as a global admin or SharePoint admin.
  2. Navigate to OneDrive admin center
    In the left navigation, select Admin centers and then OneDrive.
  3. Check Sync settings
    In the OneDrive admin center, select Sync from the left menu. Under Known Folder Move, verify that Enable Known Folder Move is set to On.
  4. Verify scope
    If the policy is scoped to specific security groups, confirm the remote user is a member of the correct group. Group membership updates can take up to 24 hours.

Step 2: Verify Network Connectivity to OneDrive Endpoints

  1. Check firewall rules
    Remote VPNs often block outbound traffic to non-standard ports. Ensure that TCP ports 443 and 80 are open to onedrive.live.com, login.microsoftonline.com, and files.1drv.com (including all subdomains).
  2. Test connectivity
    On the remote device, open a command prompt and run nslookup onedrive.live.com. If the DNS resolution fails, the device cannot reach OneDrive servers.
  3. Disable proxy temporarily
    If the remote device uses a proxy, bypass it for OneDrive URLs. In Windows, go to Settings > Network & internet > Proxy and add live.com (including all subdomains) to the exception list.

Step 3: Apply Group Policy for Silent Known Folder Move

For remote devices that are not domain-joined, use a local Group Policy Object or a registry key to enforce the silent move.

  1. Open Local Group Policy Editor
    Press Win + R, type gpedit.msc, and press Enter.
  2. Navigate to OneDrive policy
    Go to Computer Configuration > Administrative Templates > OneDrive. If the OneDrive templates are missing, download the OneDrive administrative templates from the Microsoft Download Center and add them.
  3. Enable silent move
    Double-click Silently move Windows known folders to OneDrive, select Enabled, and click OK.
  4. Apply the policy
    Run gpupdate /force in an elevated command prompt.

If Local Group Policy Editor is not available on Windows 10/11 Home edition, use the registry method instead:

  1. Open Registry Editor
    Press Win + R, type regedit, and press Enter.
  2. Create the policy key
    Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive. If the OneDrive key does not exist, right-click Microsoft, select New > Key, and name it OneDrive.
  3. Add the DWORD value
    Right-click the OneDrive key, select New > DWORD (32-bit) Value, and name it KFMOptIn. Set the value to 1.
  4. Restart OneDrive
    Close and reopen OneDrive. The known folders should begin moving automatically.

Step 4: Initiate Known Folder Move Manually on the Remote Device

  1. Open OneDrive settings
    Right-click the OneDrive cloud icon in the system tray and select Settings.
  2. Go to the Backup tab
    Select the Backup tab. If you see a message that says “Back up important folders,” the move has not started.
  3. Start the backup
    Click Manage backup. Ensure that Desktop, Documents, and Pictures are all checked. Click Start backup.
  4. Wait for completion
    The move can take several minutes depending on the folder size. Do not close the settings window until the status changes to “Your folders are backed up.”

Step 5: Verify Known Folder Move Status

  1. Check the system tray icon
    Hover over the OneDrive icon. The tooltip should show “Backed up: Desktop, Documents, Pictures.”
  2. Open File Explorer
    Navigate to C:\Users\YourUsername\OneDrive. The Desktop, Documents, and Pictures folders should appear under the OneDrive folder, not under the user profile.
  3. Use the OneDrive admin center to verify
    In the OneDrive admin center, go to Sync > Known Folder Move and select View device status. Look for the remote user’s device in the list. The status should show Moved for each folder.

ADVERTISEMENT

If Known Folder Move Still Fails After the Checklist

OneDrive shows “We can’t back up this folder” error

This error appears when the folder path contains unsupported characters or is longer than 256 characters. Rename the folder or move files to a shorter path before retrying the move.

OneDrive sync app is not installed on the remote device

Known Folder Move requires the OneDrive sync app version 19.002.0107.0006 or later. Download the latest version from onedrive.com/download. After installation, sign in with the work or school account.

User receives “Your organization requires you to back up your folders” but the move does not start

This notification appears when the tenant policy is enabled but the silent move policy is not applied. Follow Step 3 of the checklist to apply the registry key or local policy.

Known Folder Move Silent vs Manual: Key Differences

Item Silent Move (Group Policy) Manual Move (User Initiated)
User interaction required None User must click Start backup
Prerequisite Local or domain Group Policy applied Tenant policy enabled
Best for Domain-joined or Azure AD joined devices Personal devices or unmanaged machines
Failure point Policy not applied or network blocked User skips the prompt or network timeout
Recovery Apply policy and restart OneDrive Open Settings > Backup and start manually

Use silent move for company-owned remote devices that are Azure AD joined. Use manual move for personal devices where you want the user to control the timing.

After completing the checklist, remote staff can successfully move their Desktop, Documents, and Pictures folders to OneDrive without setup interruption. Run the verification steps in Step 5 to confirm the move on each device. For ongoing monitoring, enable the Known Folder Move report in the OneDrive admin center to track devices that have not completed the move. As an advanced tip, use the OneDrive deployment tool OneDriveSetup.exe /configure with an XML file to preconfigure Known Folder Move settings during device provisioning.

ADVERTISEMENT