Home

Intune KFM not enabling with script

%3CLINGO-SUB%20id%3D%22lingo-sub-440133%22%20slang%3D%22en-US%22%3EIntune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-440133%22%20slang%3D%22en-US%22%3E%3CP%3E(I%20am%20part%20time%26nbsp%3BI.T.%20with%20limited%20training%20in%20deployment.)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESilent%20Configuration%20of%20Onedrive%20is%20working%20great!%20However%2C%20it%20will%20not%20automatically%20begin%20to%20%22protect%20the%20known%20folders%22.%20What%20am%20I%20potentially%20doing%20wrong%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHere%20is%20the%20script%20I%20am%20using%20from%20Microsoft.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fmtmschoolregina-my.sharepoint.com%2F%3Au%3A%2Fp%2Fdnelson%2FEQLNR5kv3xdJsL_s0Rmf3U8Bu_5yVa2FfvWgf6sGTaJF5A%3Fe%3DsTRbG5%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3EScript%20Link%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-440133%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-443194%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-443194%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F319533%22%20target%3D%22_blank%22%3E%40Dnel29%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EI%20didn't%20had%20a%20detailed%20look%20at%20your%20script%20but%20I'm%20using%20a%20very%20simple%20approach%20which%20is%20working%20very%20well.%20I%20use%20Per%20Larsens%20Script%20for%20KFM%20settings%20from%20here%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fosddeployment.dk%2F2018%2F07%2F06%2Fhow-to-deploy-onedrive-known-folder-move-with-intune%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fosddeployment.dk%2F2018%2F07%2F06%2Fhow-to-deploy-onedrive-known-folder-move-with-intune%2F%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F108395iA1934EE953D90E38%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22SNAG-0064.png%22%20title%3D%22SNAG-0064.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Eand%20in%20addition%20I%20use%20Administrative%20Templates%20for%20all%20the%20other%20settings%3A%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-center%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F108394i61444C49DCD7E66E%2Fimage-size%2Fmedium%3Fv%3D1.0%26amp%3Bpx%3D400%22%20alt%3D%22SNAG-0063.png%22%20title%3D%22SNAG-0063.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt's%20just%20a%20matter%20of%20time%20until%20we%20have%20the%20KFM%20settings%20also%20available%20in%20the%20Administrative%20Templates%20available.%20But%20for%20now%20we%20have%20to%20set%20the%20KFM%20keys%20by%20Intune%20Management%20Extension.%3C%2FP%3E%0A%3CP%3EGive%20it%20a%20try%2C%20this%20combination%20works%20very%20solid.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3CBR%20%2F%3EOliver%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-454717%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-454717%22%20slang%3D%22en-US%22%3E%3CP%3EI%20have%20not%20tested%20for%20a%20while%20but%20I%20had%20this%20working%20using%20the%20following%20OMA-URIs.%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3EName%3C%2FTD%3E%3CTD%3E%3CSTRONG%3ESilentAccountConfig%3C%2FSTRONG%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EDescription%3C%2FTD%3E%3CTD%3ESilently%20configure%20OneDrive%20using%20the%20primary%20Windows%20account%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EOMA-URI%3C%2FTD%3E%3CTD%3E.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfig%2FOneDriveNGSC~Policy~OneDriveNGSC%2FSilentAccountConfig%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EData%20type%3C%2FTD%3E%3CTD%3EString%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EValue%3C%2FTD%3E%3CTD%3E%3CP%3E%3CENABLED%3E%3C%2FENABLED%3E%3C%2FP%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CP%3EName%3C%2FP%3E%3C%2FTD%3E%3CTD%3E%3CSTRONG%3EKFMOptInNoWizard%3C%2FSTRONG%3E%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EDescription%3C%2FTD%3E%3CTD%3ESilently%20redirect%20Windows%20known%20folders%20to%20OneDrive%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EOMA-URI%3C%2FTD%3E%3CTD%3E.%2FDevice%2FVendor%2FMSFT%2FPolicy%2FConfig%2FOneDriveNGSC~Policy~OneDriveNGSC%2FKFMOptInNoWizard%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EData%20type%3C%2FTD%3E%3CTD%3EString%3C%2FTD%3E%3C%2FTR%3E%3CTR%3E%3CTD%3EValue%3C%2FTD%3E%3CTD%3E%3CENABLED%3E%3C%2FENABLED%3E%20%3CDATA%20id%3D%22%26quot%3BKFMOptInNoWizard_TextBox%26quot%3B%22%20value%3D%22%26quot%3BInsert%22%20your%3D%22%22%20azure%3D%22%22%20tenant%3D%22%22%20id%3D%22%22%3E%3C%2FDATA%3E%20%3CDATA%20id%3D%22%26quot%3BKFMOptInNoWizard_Dropdown%26quot%3B%22%20value%3D%22%26quot%3B0%26quot%3B%2F%22%3E%3C%2FDATA%3E%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-461126%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-461126%22%20slang%3D%22en-US%22%3E%3CP%3ETried%20the%20OMA-URIs%20today%20and%20can%20confirm%20it's%20working.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-461195%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-461195%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F310475%22%20target%3D%22_blank%22%3E%40almennn%3C%2FA%3E%2C%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Esure%20this%20works%20but%20only%20if%20you%20have%20ingested%20the%20OneDrive%20ADMX%20also%20which%20is%20not%20listed%20in%20your%20OMA-URIs.%20The%20bad%20thing%20about%20ingesting%20OneDrive%20is%20that%20the%20%22Administrative%20Templates%22%20feature%20in%20Intune%2C%20the%20one%20I%20mentioned%20above%20is%20also%20ingesting%20the%20OneDrive%20admx.%20So%20you%20risk%20to%20generate%20a%20conflict%20as%20you%20can%20only%20ingest%20the%20original%20OneDrive%20admx%20from%20one%20source.%20MS%20will%20update%20the%20OneDrive%20ingestion%20they%20use%20within%20the%20Administrative%20Templates%20to%20have%20the%20KFM%20included%20in%20near%20future.%20So%20for%20now%20it%20is%20more%20safe%20to%20use%20the%20PowerShell%20script%20for%20the%20KFM%20settings%20to%20avoid%20possible%20conflicts%20and%20use%20the%20native%20%22Administrative%20Templates%22%20for%20all%20available%20settings%20of%20OneDrive%20and%20as%20soon%20as%20MS%20has%20updated%20you%20can%20skip%20the%20PowerShell%20script%20and%20use%20only%20the%20Administrative%20Templates%20only%20to%20configure%20all%20from%20Intune.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3Ebest%2C%3C%2FP%3E%0A%3CP%3EOliver%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-508425%22%20slang%3D%22en-US%22%3ERe%3A%20Intune%20KFM%20not%20enabling%20with%20script%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-508425%22%20slang%3D%22en-US%22%3E%3CP%3EThanks%2C%20everyone!%20I%20got%20it%20working%20after%20some%20trial%20and%20error.%20Right%20now%20we%20are%20just%20testing%20so%20I%20did%20use%20the%20admx%20onedrive%20ingesting.%20Hopefully%2C%20when%20we%20are%20ready%20to%20fully%20implement%20Intune%20the%20KFM%20will%20be%20within%20the%20admin%20templates.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Dnel29
New Contributor

(I am part time I.T. with limited training in deployment.)

 

Silent Configuration of Onedrive is working great! However, it will not automatically begin to "protect the known folders". What am I potentially doing wrong?

 

Here is the script I am using from Microsoft.

 

Script Link

 

5 Replies

Hi @Dnel29,

 

I didn't had a detailed look at your script but I'm using a very simple approach which is working very well. I use Per Larsens Script for KFM settings from here:

 

https://osddeployment.dk/2018/07/06/how-to-deploy-onedrive-known-folder-move-with-intune/

 

SNAG-0064.png

 

and in addition I use Administrative Templates for all the other settings:

 

 

SNAG-0063.png

 

It's just a matter of time until we have the KFM settings also available in the Administrative Templates available. But for now we have to set the KFM keys by Intune Management Extension.

Give it a try, this combination works very solid.

 

best,
Oliver

 

I have not tested for a while but I had this working using the following OMA-URIs.

NameSilentAccountConfig
DescriptionSilently configure OneDrive using the primary Windows account
OMA-URI./Device/Vendor/MSFT/Policy/Config/OneDriveNGSC~Policy~OneDriveNGSC/SilentAccountConfig
Data typeString
Value

<enabled/>

Name

KFMOptInNoWizard
DescriptionSilently redirect Windows known folders to OneDrive
OMA-URI./Device/Vendor/MSFT/Policy/Config/OneDriveNGSC~Policy~OneDriveNGSC/KFMOptInNoWizard
Data typeString
Value<enabled/> <data id="KFMOptInNoWizard_TextBox" value="Insert Your Azure Tenant ID"/> <data id="KFMOptInNoWizard_Dropdown" value="0"/>

Tried the OMA-URIs today and can confirm it's working.

Hi @almennn,

 

sure this works but only if you have ingested the OneDrive ADMX also which is not listed in your OMA-URIs. The bad thing about ingesting OneDrive is that the "Administrative Templates" feature in Intune, the one I mentioned above is also ingesting the OneDrive admx. So you risk to generate a conflict as you can only ingest the original OneDrive admx from one source. MS will update the OneDrive ingestion they use within the Administrative Templates to have the KFM included in near future. So for now it is more safe to use the PowerShell script for the KFM settings to avoid possible conflicts and use the native "Administrative Templates" for all available settings of OneDrive and as soon as MS has updated you can skip the PowerShell script and use only the Administrative Templates only to configure all from Intune.

 

best,

Oliver

Thanks, everyone! I got it working after some trial and error. Right now we are just testing so I did use the admx onedrive ingesting. Hopefully, when we are ready to fully implement Intune the KFM will be within the admin templates.

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
35 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
9 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies