Forum Discussion
What are known folders ???????
Yes they are those special folders you mentioned such as Desktop, Documents, Program Files, etc. You can actually list them with this https://weblogs.asp.net/kennykerr/Known-Folders-Browser-1.0-_2800_for-Vista-and-Beyond_2900_, which I tried out and works ok:
stev Wolf - To keep it simple in the OneDrive context, Known Folders = Documents, Desktop, and Pictures.
Lou_Mickley Thanks for that answer. That was what I was looking for. Just the folders that are migrated to OneDrive for Business when the Group Policy is enabled to redirect known folders. Now that I know just what folders are used I can right a PowerShell Script that will report the total disk drive space used by a user in those 3 known folder trees.
Why? Because if you were to enable the GPO for this to all your users at one time you could bring your network to its knees as thousands of users began to automatically sync to the cloud the contents of those folders.
By determining ahead of time how much a user has in those folders and having that for all users, knowing that it will be a "snapshot" in time will allow larger groups of users with lower disk space needs to be "activated" using Group Policy Advanced Delegation permission to be enabled. Keep in mind that we want to use "Computer" group policy, so the delegated permissions are achieved by removing the "apply" right from the GPO to the "Authenticated Users" group and creating a security group that you then put the users computer objects into, you then add to the security filtering group listing and then it will appear under the delegation tab with the default rights, which include "Read" and "Apply", Read lets it "Read" the GPO if it is linked to an OU with that machine in it and "Apply" allows it to actually be applied after it is read.
WARNING: DO NOT REMOVE the READ right from the Authenticated users group. Why? because the "Authenticated Users" group always contains ALL user objects AND all computer objects. So if you remove the read right from the Authenticated user group, the GPO will not be read by any object.
- You are on your way. You can also throttle the upload speed in the GPO if you are concerned about saturating your internet pipes.
Yes, I saw that in the settings, Microsoft recommends 70%, but it might be better to set it lower for the initial roll out. To try and determine the impact I wrote a PowerShell script that I deploy with SCCM under the users login context. It shows me the total size of disk space being used by the 3 known folders as well as a separate entry of disk space usage for users OneDrive Personal folders and/Or the OneDrive for Business folder. Using this data I can target the GPO folks with minimal use.
Microsoft just came out with a new OneDrive setup program which is dramatically changed. Now instead of using a machine wide installer for OneDrive for Business that installs into the users profile when they login, the new installer installs the files under Programs and Features (x86). It automatically removes the user install if present, leaving the users OneDrive files as is but converting the OneDrive Personal to One Drive for Business, once installed it looks like all updates will be automatic from Microsoft. https://docs.microsoft.com/en-us/onedrive/per-machine-installation (Preview)
