How to Use OneDrive Policies With Intune Settings Catalog

You want to configure OneDrive for Business settings across all managed Windows devices without touching each machine individually. The Intune Settings Catalog lets you deploy OneDrive policies as part of your device configuration profiles. This article explains where to find the OneDrive settings in the catalog, how to create a profile, and which policies have the most impact on sync behavior and user experience.

OneDrive settings in the Settings Catalog are organized under the category name OneDrive. You can control sync restrictions, file on-demand behavior, Known Folder Move, and automatic sign-in. The catalog replaces older administrative templates and provides a single place to manage settings for Windows 10 and Windows 11 devices enrolled in Microsoft Intune.

This guide walks you through locating the settings, building a configuration profile, and assigning it to the correct device groups. You will also learn how to avoid common mistakes that block sync or confuse users.

What Are OneDrive Policies in the Intune Settings Catalog

The Intune Settings Catalog is a collection of configurable device settings for Windows 10 and Windows 11. It replaces the older administrative templates CSP and provides a unified view of all settings that Intune can manage. OneDrive settings appear in this catalog when you filter by the category named OneDrive.

Each setting in the catalog corresponds to a registry key or a Group Policy setting that the OneDrive sync client reads at startup. When you deploy a policy through Intune, the sync client applies the setting the next time it starts or after a sync cycle. The catalog includes settings for:

• Silent sign-in and account configuration
• Files On-Demand enable or disable
• Known Folder Move backup for Desktop, Documents, and Pictures
• Block sync of specific file types
• Maximum upload and download bandwidth
• SharePoint and Teams sync behavior

You do not need to install any additional software on the devices. The OneDrive sync client version 19.002 or later supports these policies. Devices must be enrolled in Intune and running Windows 10 version 1809 or later, or Windows 11 any version.

Steps to Create a OneDrive Policy Profile in Intune

Follow these steps to create a device configuration profile that applies OneDrive policies. You will use the Settings Catalog profile type.

1. Sign in to the Microsoft Intune admin center
   Open a browser and go to https://intune.microsoft.com. Sign in with an account that has the Policy and Profile Manager or Global Administrator role.
2. Navigate to device configuration profiles
   Select Devices in the left navigation. Under Manage devices, select Configuration profiles. Click Create profile.
3. Select the platform and profile type
   In the Create a profile pane, set Platform to Windows 10 and later. Set Profile type to Settings Catalog. Click Create.
4. Enter a name and description
   On the Basics tab, type a name such as OneDrive Sync Policies. Add a description that explains the purpose. Click Next.
5. Add settings from the catalog
   On the Configuration settings tab, click Add settings. In the Settings picker, type OneDrive in the search box. Select the OneDrive category. Browse the list of settings and check the boxes next to the ones you want to configure. For example, check SilentAccountConfig, EnableFilesOnDemand, and KFMOptIn. Click the X to close the picker.
6. Configure each setting value
   For each setting you added, set the value. Set SilentAccountConfig to Enabled. Set EnableFilesOnDemand to Enabled. Set KFMOptIn to Enabled. Some settings require additional values such as Tenant ID or folder GUID. Refer to the Microsoft documentation for the exact values. Click Next.
7. Assign the profile to device groups
   On the Assignments tab, click Add groups and select the Azure AD device groups that should receive the policy. Do not assign to user groups unless the setting explicitly supports user scope. Click Next.
8. Review and create the profile
   On the Review + create tab, verify all settings. Click Create. The profile appears in the list and applies to devices during their next check-in.

Common Mistakes and Limitations When Using OneDrive Policies

Settings do not apply because the device has an older OneDrive version

The Intune Settings Catalog policies require OneDrive build 19.002 or later. Devices running older versions ignore the settings. Update the OneDrive sync client through Microsoft 365 Apps updates or deploy the latest version using Intune Win32 app deployment.

SilentAccountConfig does not work on Azure AD joined devices

SilentAccountConfig works only on devices that are hybrid Azure AD joined or Azure AD registered. On pure Azure AD joined devices, OneDrive uses the primary refresh token automatically and the policy has no effect. Test your scenario before deploying this setting broadly.

Known Folder Move policy requires a tenant ID

The KFMOptIn setting requires the tenant ID GUID as a value. If you enter the tenant domain name instead of the GUID, the policy fails. Find the tenant ID in the Azure AD admin center under Properties. Copy the Tenant ID string and paste it exactly.

Settings conflict with local Group Policy

If a device has a local Group Policy object that sets the same OneDrive registry key, the local policy overrides the Intune policy. Remove conflicting GPOs or set them to Not Configured. Intune policies apply only when no local policy exists for the same registry path.

Files On-Demand vs Always Keep on This Device: Key Differences

Item	Files On-Demand Enabled	Files On-Demand Disabled
Description	Files appear in File Explorer as online-only placeholders	All files are downloaded to the device by default
Disk space usage	Minimal — only metadata and thumbnails are stored locally	Full file contents use local storage
User flexibility	Users can right-click and choose Always keep on this device for individual files	No choice — every file is always downloaded
Network usage	Files download only when opened	Files download during initial sync and on every file change
Offline access	Only files marked as always available are accessible offline	All files are available offline
Intune setting name	EnableFilesOnDemand set to Enabled	EnableFilesOnDemand set to Disabled

You can control this behavior globally through Intune. For most organizations, enabling Files On-Demand reduces bandwidth and local storage consumption. Disable it only when users need offline access to every file without manual action.

After the policy applies, users see the change the next time they restart OneDrive. Open OneDrive settings, go to the Sync and backup tab, and verify the Files On-Demand toggle matches the policy value. If the toggle is grayed out, the policy is applied correctly.