Intune unable to allow OneDrive auto-sign in with Work account

Daniel Hu 5

Hi all,

I am deploying PCs to all company users via Intune, and I have already setup Configuration Profile to enable OneDrive auto-sign so the user could be automatically signed-in to OneDrive. However, the settings just never took effect, I tried 3 computers using 4 different accounts that has Intune subscription, but none of them gets the auto sign-in unless I manually sign them in.

Does anyone got lucky for enabling Silent sign-in to OneDrive via Intune?

Screenshot 2023-09-06 at 1.55.15 PM

Rahul Jindal [MVP] 9,146 Reputation points MVP

2023-09-07T12:16:38.6533333+00:00

Have you deployed to users or devices? Is the manual sign-in going through?
Daniel Hu 5 Reputation points

2023-09-07T22:13:42.5333333+00:00

Yes, if I manual sign-in, I don't even need to enter the password, it only need me to enter the user name, if it matches my current logged on user, it will sign-in. And if I restart computer, it will stay sign-in. However, I want to make it as if the user gets the laptop the first time, they can't avoid signing in to OneDrive, but it automatically does, so I can be sure everyone is syncing their files. Is it possible?

5 answers

Kieran Walsh 20 Reputation points

2024-01-04T15:54:27.31+00:00
I've finally manged to get this to work on Shared PCs. You also need:

Device Settings Catalog entries:

Disable “Fast First Sign In”

Device Configuration Profiles - Custom OMA-URI Settings:

MDMWinsOverGP ./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP Integer 1

and

DisableOneDriveFileSync ./Device/Vendor/MSFT/Policy/Config/System/DisableOneDriveFileSync Integer 0
Please sign in to rate this answer.

1 person found this answer helpful.
Piotr Ścibior 0 Reputation points

2024-01-23T08:32:22.71+00:00

Disable “Fast First Sign In” - where can you find this setting?

Kieran Walsh 20 Reputation points

2024-02-13T16:31:27.2266667+00:00

Sure, it's Configuration settings -> Authentication -> Enable Fast First Sign In. Set it to Disabled.

Piotr Ścibior 0 Reputation points

2024-02-14T09:44:49.2033333+00:00

Thank you. Although I still see that OneDrive will not log in automatically. User has a M365 E5 license, Intune policies are configured properly and are deployed with success. I am running out of ideas :)

Kieran Walsh 20 Reputation points

2024-02-15T08:03:10.07+00:00

Oh ok, these are the only other relevant Configuration Profiles that we've set:

Templates -> Administrative Templates -> Computer Configuration:

Silently sign in users to the OneDrive sync app with their Windows credentials

Convert synced team site files to online-only files

Silently move Windows known folders to OneDrive

Prompt users when they delete multiple OneDrive files on their local computer

Use OneDrive Files On-Demand

Enable all those for DEVICES - not users.

Piotr Ścibior 0 Reputation points

2024-02-15T08:16:17.8533333+00:00

Hi. So I have 3 Configuration Policies currently, all assigned to a group of PCs. First is for OneDrive: Second is disabling FastFirstSignIn and third is disabling the option to "DisableOneDriveFileSync". Still no effect on endpoint devices. Im doing test on two HP laptops that were addedd to Intune. Other policies, like Firewall, Antivirus, applications etc. work fine.

Kieran Walsh 20 Reputation points

2024-02-15T13:04:04.23+00:00

I think that your screenshot shows user policies, and the ones I've outlined are per-device. Have you set them there as well? I've found that these can take a while to work. Give it at least two hours before retesting.

Piotr Ścibior 0 Reputation points

2024-02-16T10:54:53.6133333+00:00

The important ones are "per device". Still no effect on two test devices. They were also being reset to factory a couple of times to test Autopilot enrollment.

rainbow_guy 41 Reputation points

2024-02-19T11:15:19.48+00:00

Hi. Having same issue. Do we have to enable what you mentioned about Shared PCs for other scenarios as well? I am only using Azure AD joined VM in this case.

Carl Slaughter 0 Reputation points

2024-03-08T16:30:43.99+00:00

Any more info on this. I have done all the action items in this thread and still can't get it to work, once the user signs in its fine but the initial sign in does not work.
Sign in to comment
ZhoumingDuan-MSFT 8,060 Reputation points Microsoft Vendor

2023-09-07T05:45:22.1633333+00:00
@Daniel Hu, Thanks for posting in Q&A.

From your description, We know that you cannot auto-sign in oneDrive after configuring automatically login policy.

Please check the configuration profile deployment status, if it is success, please check the registry whether changed which locate in HKEY_LOCAL_MACHINA\SOFTWARE\Policies\Microsoft\OneDrive, if yes, please try the method below:

Open CMD and run with Administrator

Run REG ADD HKCU\Software\Microsoft\OneDrive /v EnableADAL /t REG_DWORD /d 1 /f

Please check the above information and If there’s any update, feel free to let us know.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
Please sign in to rate this answer.
Daniel Hu 5 Reputation points

2023-09-07T22:21:20.5133333+00:00

Dear Zhouming,

I checked the registry and the OneDrive folder is not there. Please see attached screenshot.

Daniel Hu 5 Reputation points

2023-09-07T22:25:04.6733333+00:00

Does the Intune OneDrive policy suppose to take effect when the user just got the computer and login for the first time?

It looks like this when the user first logged in:

ZhoumingDuan-MSFT 8,060 Reputation points Microsoft Vendor

2023-09-08T08:23:27.2866667+00:00

@Daniel Hu,Thanks for your reply.

Based on my testing, I found that we need to sign in the OneDrive with user account at the first time, and then the device will create the registry key and apply the policy. After that, then it will auto log in next time.

Please try above mentioned, if there is any update, feel free to contact me.

Daniel Powell 5 Reputation points

2023-09-08T13:05:25.33+00:00

Hi,

I've also noticed an issue with the silently sign-into Onedrive App policy doesn't appear to be working.

I do not believe you are right in saying "we need to sign in the OneDrive with user account at the first time," This completely defines the point of having in signed in automatically, if you need to sign in manually the first time.

Daniel Hu 5 Reputation points

2023-09-08T18:57:28.2033333+00:00

Dear all,

Yes, I was going to use the policy for OneDrive to silently sign-in for user's Work account, because I noticed that from my testing, if I setup a computer with a Personal Microsoft account from OOBE (Reset PC), the OneDrive is AUTOMATICALLY signed-in, without having to manually sign-in. This is what I am trying to do for my company users as an IT Administrator. I need their files to be automatically backed up with Intune Policy, without having to "ask" them to do it, which could ends up only 30% of users might do it.

If the auto sing-in feature works in the Work account like Personal account that would be great. If this comes with a policy that enforces backup and unable to sign-out of OneDrive by the user, that would be best. Isn't this the whole point of enforcing Intune policy? Otherwise, isn't it the same as if I only "ask" all users to do it?

Thank you so much!

Daniel Hu 5 Reputation points

2023-09-08T18:59:58.2533333+00:00

Dear all,

From my test PC, I reset it and sign in with a Personal MS account, then the OneDrive is automatically signed-in. That's what I'm looking for with the Work Account. Is it possible to do that via Intune?

ZhoumingDuan-MSFT 8,060 Reputation points Microsoft Vendor

2023-09-11T09:04:29.05+00:00

@Daniel Hu,Thanks for your reply.

According to the description of the setting in Intune Portal, it did not say that it does not apply to work accounts.

Based on my test, the description of the relevant settings is somewhat different from the experimental results, and I suggest you follow the link below to open case for further help.

Get support in the Microsoft Intune admin center - Microsoft Intune | Microsoft Learn

Thanks for your kind understanding.

Daniel Hu 5 Reputation points

2023-09-11T16:19:45.94+00:00

Dear Zhouming,

Thanks for confirming. However, if Microsoft can fix this bug it would be great. I don't know if I have time to run the whole process again to report bug and work with support team back and forth...

ZhoumingDuan-MSFT 8,060 Reputation points Microsoft Vendor

2023-09-12T02:01:00.0033333+00:00

@Daniel Hu,Thanks for your reply.

We will try to provide feedback but can’t guarantee response, We still recommend that you can open case when you are free.

Having a nice day!
Sign in to comment
AdamPollardPowell-0167 30 Reputation points

2024-01-01T17:37:03.7766667+00:00

It is really annoying and backward to have to ask users to manually log in to OneDrive. We are trying to establish hot desking with minimal support staff intervention. Our policy is for users to not store data on their hard drives, so this is a big time sink not to mention data loss risk.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
AdamPollardPowell-7951 0 Reputation points

2024-03-09T11:52:27.43+00:00

Thanks Kieran, I found these work. When we enroll a new pc, it can take 30 mins or so and a couple of reboots but no sign in necessary with the occasional exception.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment
Dale Huhtala 0 Reputation points

2024-04-10T16:37:32.47+00:00

I keep hearing this with Intune - reboot a couple of times, log in and out, wait 30-60 minutes, etc. How is that better than just manually signing in?

Intune seems broken...guess I'm out of "cloud patience".
Please sign in to rate this answer.

0 comments No comments
Sign in to comment