Prevent users from disabling OneDrive Desktop app

johnjjohn 

To prevent users from disabling the OneDrive desktop app and deselecting the "Start OneDrive when I sign in to Windows" setting, you can utilize Group Policy settings in combination with Intune.

Here is how you can do it:

1. Create a new Group Policy Object (GPO) or edit an existing GPO that targets the computers you want to apply the policy to.
2. Open the Group Policy Management Editor and navigate to the following policy setting: Computer Configuration > Administrative Templates > Windows Components > OneDrive
3. Locate the policy setting named "Prevent users from syncing personal OneDrive accounts" and set it to "Enabled". This policy prevents users from adding personal OneDrive accounts to the OneDrive desktop app.
4. Additionally, you can enable the policy setting named "Prevent users from synchronizing personal OneDrive accounts" to further restrict the use of personal OneDrive accounts.
5. Save and apply the GPO to the appropriate organizational units or devices.
6. Next, configure Intune to apply the Group Policy settings to the targeted devices using the Administrative Templates profile in Intune. You can create a new Administrative Templates profile or modify an existing one.
7. In the Administrative Templates profile, navigate to the corresponding policy setting mentioned above and configure it to match the Group Policy setting you applied earlier.
8. Assign the profile to the targeted devices or user groups in Intune.

By combining Group Policy settings with Intune, you can enforce the desired OneDrive desktop app configuration and prevent users from disabling specific settings related to OneDrive.