Onedrive silent sign in

Copper Contributor

Hello friends!

I've simulate in my lab environment an hybrid Azure AD environment containing a domain controler, a separate server with Azure AD Connect 2.1.16.0 and two test machines. AD Connect is configured with Hybrid Join, Password Hash Synchronization and SSO enabled.

My test machines appear in Azure AD as hybrid joined whthout assigned owner,but this seems to be the correct behaviour.

Following several guides like 

https://learn.microsoft.com/en-us/onedrive/use-silent-account-configuration

https://learn.microsoft.com/en-us/onedrive/use-group-policy

or

https://www.adamfowlerit.com/2018/02/onedrive-business-auto-sign-windows-10/

I´ve configure Onedrive silent configuration but it doesn´t work. When the user signs in the ondrive sync client looks for updates and after that it doesn´t do anything more, it just shows the message "Not signed in".

I´ve applied the script mentioned in this article on an AD Joined machine and it works perfectly

https://learn.microsoft.com/en-us/onedrive/use-silent-account-configuration

but on my hybrid joined machines with the GPOs nothing happens, it seems like the silent config process doesn´t even start . My GPOs enable the "Silent move Windos Knowb folders to Onedrive" and the "Silently sign in users to their Onedrive Sync app with their windows crdentials" and also add "https://autologon.microsoftazuread-sso.com" and "https://aadg.windows.net.nsatc.net" to the local intranet sites.

Someone has experienced such a  behaviour? I´m missing something important not mentioned in the guides? 

Any help will be appreciated

Thank you in advanced

1 Reply

Hello again!

there was some kind of problem with the VLAN in my Lab. I´ve create a brand new VLAN without firewall/proxy etc between machines and Azure AD and the same configuration works perfectly. In addition I have also rollout the SSO configuration to the users like it os described here
https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start

Hope it helps!