Syntax to add OneDrive Known Folder Move folders to Controlled Folder Access policy

IMK 581 Reputation points
2023-02-22T13:07:33.0033333+00:00

Hi

We are using Intune to set OneDrive to move Known Folders to OneDrive. We also have enabled Controlled Folder Access.

What I have understood, when Desktop, Documents and Pictures folders are moved to OneDrive, the default controlled folders do not protect these folders when they are moved to OneDrive. So I have to add these folders in OneDrive to Controlled Folders policy.

But what is the correct syntax?

Is it

%userprofiles%\OneDrive - Company name\Desktop

%userprofiles%\OneDrive - Company name\Documents

%userprofiles%\OneDrive - Company name\Pictures

Microsoft 365 and Office OneDrive For business Windows
Microsoft Security Intune Security
Microsoft Security Intune Configuration
Microsoft Security Intune Other
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. IMK 581 Reputation points
    2023-02-22T15:26:51.6533333+00:00

    Actually, now that I checked again via device Defender app, Defender has regocnized that Documents -folder and Pictures -folder is in OneDrive and is showing the OneDrive path for these folders in Protected Folders list.

    But because Desktop folder is not in default protected folders list, I would need to add it myself in the list.

    But what do I add to Controlled Folder Access Protected Folders list in Endpoint Security profile list? Is it

    %userprofiles%\OneDrive - Company name\Desktop

    or

    %userprofiles%\Desktop

    0 comments No comments

  2. IMK 581 Reputation points
    2023-02-26T10:38:39.5966667+00:00

    Anyone? Haven't anyone added OneDrive folders to Protected Folders??

    0 comments No comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.