Dùng GPO tự động backup folder Document, Desktop ... vào One Drive

 

Silently move Windows known folders to OneDrive

Source: https://learn.microsoft.com/en-us/sharepoint/use-group-policy 

Use this setting to redirect and move your users' Documents, Pictures, and/or Desktop folders to OneDrive without any user interaction.

 Note

We recommend deploying the silent policy for existing devices and new devices while limiting the deployment of existing devices to 1,000 devices a day and not exceeding 4,000 devices a week. We also recommend using this setting together with Prompt users to move Windows known folders to OneDrive. If moving the known folders silently doesn't succeed, users will be prompted to correct the error and continue. See all our recommendations for configuring the sync app.

You can move all folders at once or select the folders you want to move. After a folder is moved, this policy won't affect that folder again, even if you uncheck the checkbox for the folder.

If you enable this setting and provide your tenant ID, you can choose whether to display a notification to users after their folders have been redirected. If you disable or don't configure this setting, your users' known folders aren't silently redirected to OneDrive.

Enabling this policy sets the following registry keys:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptIn"="1111-2222-3333-4444"

where "1111-2222-3333-4444" is a String value representing the tenant ID.

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInWithNotification"=dword:00000001

Setting this value to 1 shows a notification after successful redirection.

If you don't set any of the following policies, then the default policy will move all the folders (Desktop, Documents and Pictures) into OneDrive. If you want to specify the folder(s) to move, then you can set any combination of the following policies:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInDesktop"=dword:00000001: Setting this value to 1 will move the Desktop folder.

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInDocuments"=dword:00000001: Setting this value to 1 will move the Documents folder.

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInPictures"=dword:00000001: Setting this value to 1 will move the Pictures folder.

 Important

The Group Policy object User Configuration > Administrative Templates > Desktop > Prohibit User from manually redirecting Profile Folders must be set to Disabled or Not configured. Folders will not move to OneDrive if set to Enabled.

For more information, see Redirect and move Windows known folders to OneDrive.

Silently sign in users to the OneDrive sync app with their Windows credentials

 Important

Azure Active Directory Authentication Library (ADAL) is enabled automatically when the sync user is provisioned via SilentAccountConfig; so you don't have to enable it separately.

The Silently sign in users to the OneDrive sync app with their Windows credentials feature works for computers that are joined to Microsoft Entra ID.

If you enable this setting, users who are signed in on a PC that's joined to Microsoft Entra ID can set up the sync app without entering their account credentials. Users will still be shown OneDrive Setup so that they can select folders to sync and change the location of their OneDrive folder. If a user is using the previous OneDrive for Business sync app (Groove.exe), the new sync app attempts to take over syncing the user's OneDrive from the previous app, and preserves the user's sync settings. This setting is frequently used together with Set the maximum size of a user's OneDrive that can download automatically on PCs that don't have Files On-Demand and with Set the default location for the OneDrive folder.

 Important

We recommend enabling silent account configuration when you configure the sync app. See all our recommendations for configuring the sync app.

Enabling this policy sets the following registry key value to 1:

[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"SilentAccountConfig"=dword:00000001

For more information about this feature, including troubleshooting steps, see Silently configure user accounts. Let us know if you have feedback on this feature or encounter any issues. Right-click the OneDrive icon in the notification area and select Report a problem. Tag any feedback with "SilentConfig" so that your feedback is sent directly to engineers working on this feature.