Forum Discussion

WilsonSu's avatar
WilsonSu
Icon for Microsoft rankMicrosoft
Mar 01, 2019

OneDrive for Business | Known folder silently redirection not work

Hi Everyone,   Recently, one of my customers meet the issue on "Silent move Windows Known folders to OneDrive". When we configure the correct registry in local machine as following KB, the poli...
KFM
OneDrive for Business
WilsonSu's avatar
WilsonSu
Icon for Microsoft rankMicrosoft
Jul 31, 2019

msmyth 

The issue might be still related to the conflict of Known Folder redirection in Group Policy. Here are two conflict policies in my experience as below.

The first path of the GPO is “User Config -> Policies -> Administrative Templates -> Desktop -> Prohibit User from manually redirecting Profile Folders”.

The second path of the GPO is “User Configuration -> Policies -> Windows Settings -> Folder Redirection -> Desktop/Documents/Pictures”.

 

Another point is that KFM GPO needs to input your <tenant ID> and only be available in OneDrive for Business. Otherwise, to confirm whether it is the conflict of GPO cause this issue, you could try to use a PC to manually backup your known folders in settings to see whether it has error message. 

Mario Pastora's avatar
Mario Pastora
Brass Contributor
Jul 31, 2019
Thanks so much, In fact we were able to find which GPO had us cornered and in fact we were redirecting the Documents folder to a local network drive letter. once we disabled that we were able to move on and made it past to a new issue which prevents us from enabling Silent Sign On. Whenever a Windows 10 user's profile gets recreated OneDrive will get stuck complaining that this folder already exists and won't make it past unless you right click on OneDrive blue icon break OneDrive and then Launch OneDrive from the user's profile and Sign in manually only then the OneDrive stays.. has anyone else experience this? perhaps knows a work around to this?
  • WilsonSu's avatar
    WilsonSu
    Icon for Microsoft rankMicrosoft
    Jul 31, 2019

    Mario Pastora It should be related to another registry key as following.

    You could check or change the registry key <SilentBussinessConfigCompleted> to 0 in <Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive>. Then the silently sign on will be triggerred again when you restart the computer. 

     

    • Mario Pastora's avatar
      Mario Pastora
      Brass Contributor
      Aug 01, 2019

      Testing it out as we speak... WilsonSu I shall report that it works fine for the user's profile for which we deleted the profile for prior. But when I go try to sign in with a user that has never logged in before to that PC I keep getting this error Login was either interrupted or unsuccessful. Please try logging in again. Code: 0x8004deb4 (RETRY or CANCEL) when I click on Retry it just say We can't sync your "OneDrive - Company name" folder Sorry, we can't add your "oneDrive - mycompany" folder right now Please try again. Do I have to do this at each new user that tries to sign in? individually?

      <SilentBussinessConfigCompleted> to 0 in <Computer\HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive

      • WilsonSu's avatar
        WilsonSu
        Icon for Microsoft rankMicrosoft
        Aug 02, 2019

        Mario Pastora 

        Nope, this key will automatcially become 1 once the GPO works at the first time. But it is related to the User key, so it is 0 by default with new user account. For the error code, you'd better check the Azure hybird or device Azure AD joined. Because Silent Sign On GPO should work with Device Azure hybird, so if you run <dsregcmd /status> in cmd and the Azure AD joined is 'no', you will definitely meet this issue.

         

        How to confirm whether Azure AD joined is the cause?

        Let's open a browser and access office 365. If the browser could automatically sign in with the current account (no need to input accout and password), the OneDrive silent sign in should also work.

    • msmyth's avatar
      msmyth
      Copper Contributor
      Aug 01, 2019

      Well it was the "Prohibit User from manually redirecting Profile Folders" Group Policy, I had removed the setting at the same time that someone else applied a duplicate group policy to deploy some other settings for another project that still had this set!

       

      GPO changed and hey-presto all now working as it should

Resources