Forum Discussion
Silently configure OneDrive using Windows 10 or domain credentials
Hi ,
In reference to :
(Preview) Silently configure OneDrive using Windows 10 or domain credentials
https://support.office.com/en-us/article/Use-Group-Policy-to-control-OneDrive-sync-client-settings-0ecb2cf5-8882-42b3-a6e9-be6bda30899c
I have a few questions;
The article states that "This policy lets you configure the OneDrive sync client silently using the primary Windows account on Windows 10, and domain credentials on Windows 7 and later."
What is a primary windows account on windows 10? I have a Win 10 and i sign in using a domain account.
I created the registries for EnableADAL and SilentAccountConfig , restarted the sync client and also the machine.
This does not sign me in to my account automatically. Is there something i am missing?
I noticed a few things after adding the registries;
1.Theres a new file added under C:\Users\username\AppData\Local\Microsoft\OneDrive\settings called PreSignInSettingsConfig.json
2..Everytime i launch the onedrive app and the sign in screen appears; it creates a new update file at:
C:\Users\username\AppData\Local\Microsoft\OneDrive\setup\logs and the contents of the file say its trying to refer to the .json file mentioned in 1.
I am not sure what i am doing wrong, any help would be appreaciated.
59 Replies
- Anyone know/think this setting will be the default in future versions once the setting is out of Preview? Just so we can plan abead. In general it feels like a good default option but some kind of failback to other setting if login fails.
Any idea when this will come out of preview?
- Hey Guys, I finally got this to work.. A few things to check: 1.The GPO that distributes the registry key for SilentConfig - ENSURE that the this is linked to the OU that has Computer objects in it. 2.EnableADAL registry key - ensure that this key is created under the context of the user that you are trying to configure onedrive with. 3.If 1 and 2 are in place and this still isnt working, go the following key - change it to 0 and test the behavior again: regedit: HKCU\Software\Microsoft\OneDrive\ClientEverSignedIn - change this to 0. The silent config is supposed to run once, and if this is already set to 1 i am assuming it wont run again. Hope this helps. Priyank
Hi Priyank
First I uninstalled the onedrive from my machine. Then set ENABLEADAL and silentconfig and as you suggested I changed HKCU\Software\Microsoft\OneDrive\ClientEverSignedIn to 0 earlier it was 1.
Rebooted machine, but no luck.
In your last post you mentioned GPO that distributes the registry key for SilentConfig - ENSURE that the this is linked to the OU that has Computer objects in it. Can you please explain more about this?
I am attaching screenshot for your reference, let me know If I am still missing anything
Can you share screenshot of onedrieve related registry and GPO settings of your machine?
Avian
I was also having this problem and it sounds like my environment is similar to yours (ADFS and MFA) In addition to setting the GPOs you have set and setting the reg value "ClientEverSignedIn" to 0, I also had to set "SilentBusinessConfigCompleted" to 0.
Once that was done, it began to work when OneDrive is launched.
It's a requirement that all my users be logged into OneDrive whether they want to or not, so I've created another GPO to check if the user is configured and reset the above reg keys to 0 if they are not.
OneDrive creates a new key in the format of Business<digit> under "HKCU\Software\Microsoft\OneDrive\Accounts" for any business accounts that have been logged into OneDrive. Under that key, you can use "ConfiguredTenantID" to check that they're configured for your tenant and "UserFolder" to see where it is configured to sync to.
Also, if OneDrive does not start in the foreground, it will not configure using ADAL. The OneDrive startup reg key has the "/backgroud" parameter set, so my GPO checks to see if the user is configured and if they are not, it adds a RunOnce entry without the "/background" parameter.
It would seem HTM files are not allowed to be attached, so I've attached a screenshot of my GPO report.
The HTML can also be found here if you'd prefer that:
https://pastebin.com/1ebujuU5
By adding the registry key and the group policy settings including Files on Demand I finally have gotten it to auto configure the basic configuration, but now I'm stuck with it asking the user what to sync. With Files on Demand checked - I don't want anything synced by default. Anybody have ideas how to get past this step?
Can you please share what changes you made in registry?
Let me try this.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\OneDrive] "EnableADAL"=dword:1
Attached is screenshot of group policy
- Can OneDrive be a replacement for file server?
Jaffer, absolutely. Along with a place to store files, OneDrive provides easier access, co-authoring and versioning typically not found on file shares.
Also curious how to get this feature to work.
Yesterday MS Engineer show me silentconfig feature in their lab test environment on W7/W10. When I test in my environment where I have MFA, it is not working for me. It seems it is not compatible with MFA or there might be some setting to be update on tenant level or in user registry settings
Can anyone from MS advise on this?
Avian
HI Priyanka
Did you able to implement this feature? If so please share how did you resolved it?
Avian
