I'm currently using Folder Redirection but want to switch to OneDrive Known Folder Move (KFM). I'm curious about how to implement this smoothly, especially since my users aren't tech-savvy and need a reliable experience. We're still using desktops in a shared environment where one user may not always be tied to one device.
I've tested uploading users' Desktop, Documents, and other folders to their OneDrives with the SharePoint migration tool, and I know I can set OneDrive to redirect known folders automatically when users log in. However, I have a few challenges:
- The GPO or Intune settings to auto-sign into OneDrive won't work if Multi-Factor Authentication (MFA) isn't completed. I can't find a way to enforce users to sign into OneDrive before saving files on the device.
- I understand Windows Hello for Business is a solution for laptop users who can satisfy MFA at sign-in, but it's trickier for those using shared desktops in classrooms.
- Moving from folder redirection to OneDrive KFM doesn't seem to work without the machine trying to copy files, which complicates things. Additionally, folders like Videos, which are redirected into Documents, prevent OneDrive KFM from engaging with Documents.
I'm also worried about making this transition foolproof because we've had offline files disabled for years. I need to ensure OneDrive effectively manages sync conflicts to avoid issues where users save files locally that aren't backed up. Any advice on handling these matters would be greatly appreciated!
2 Answers
I feel you on this, I still have PTSD from dealing with redirected folders. It was a nightmare to manage the user experiences and sync issues!
We went through a similar transition a few years back and I can confidently say that OneDrive is a much better solution than folder redirection. Keeping it transparent for users is definitely achievable! Here are some tips:
- Ensure your machines are hybrid joined, or enable single sign-on (SSO). This way, users won’t have to log in again after they sign into Windows, just validate their MFA once using Edge, Teams, or Outlook.
- Avoid trying to move folders directly from the user’s machine; it’ll take too long.
- OneDrive handles conflict resolution pretty well on its own and usually just prompts users in those rare cases when it needs a choice.
Here's a general order for the migration process:
1. Create an Active Directory user group for those who you want to exclude from the folder redirection GPO.
2. Move users one by one for a smooth experience by putting them in that group to disable folder redirection.
3. Enable OneDrive KFM GPO for the same group, then run a GPO update and reboot.
4. This will turn off folder redirection upon their next login and OneDrive KFM should then run and move empty folders.
5. To transfer remaining files, use a script on an admin PC to copy data directly from the fileserver to OneDrive, which can be really fast on a gigabit network.
6. Keep track of transfers with logging in the script for troubleshooting later.
You can find the script we used here: [https://pastecode.dev/s/p6wjkb2l](https://pastecode.dev/s/p6wjkb2l)
If machines are hybrid joined and using MS Authenticator for MFA, will the GPO for silent OneDrive sign-in work after MFA validation elsewhere, or will they still have to open OneDrive manually? I’m trying to make it more automated for users.
Just to clarify, isn't the GPO for enabling OneDrive KFM set per machine? That makes gradual migration a bit tricky.
Thanks for sharing that script! It’s super helpful!