This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(275.2, 51%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EH%3C/text%3E%3C/svg%3E)
We have a AD FS setup with Azure AD Connect and OneDrive signs in without prompting the user for a password on an on-premise domain joined computer. But the user has to enter their email address. The silent configuration GPO setting does not appear to work. It looks like Azure AD Hybrid Join is a requirement, but we do not want to enable this feature. Is there any supported workaround to get OneDrive on on-premise domain computers to automatically configure based on the domain user that logged in? Thanks.
@hccuser ,
Per my research, enabling the silent account configuration policy may be a better option for automatically signing in to OneDrive.
And you may have to meet the prerequisites to enable it.
Thanks for your understanding!
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
I had seen that article and verified the SSO from AD FS, but needed to delete the silent configuration run registry key:
reg delete HKCU\Software\Microsoft\OneDrive /v SilentBusinessConfigCompleted /f
After doing that it signed in automatically using the on premise domain login. However, OneDrive was not starting automatically. I had to add a GPO to create the shortcut to OneDrive in the user profile startup folder.
The other issue is if the user stops syncing this account, then OneDrive won't sign in automatically again. This registry key needs to be deleted regularly, unless there is a GPO to lock the OneDrive settings so users cannot remove accounts.
@hccuser ,
Thanks for your reply.
For to start OneDrive automatically, please click OneDrive icon and go to Help&Settings>Setting to check "Start OneDrive automatically when I signed in to Windows" checkbox. Then go to Task Manager to make sure the OneDrive is on the Startup list.
> The other issue is if the user stops syncing this account, then OneDrive won't sign in automatically again.
<< Based on the above offcial article, manually stopping syncing by the user will prevent SilentAccountConfig from reprovisioning the user in OneDrive.
Besides, based on my researach, you may not be able to prohibit users from removing OneDrive accounts by using Group Policy.
Any updates, please feel free to post back.
@hccuser ,
If you have a chance to check this issue, please check whether our information is helpful.