![]() ![]() The path \Policies\ is based on the group policy technique where the sub key is used to overlap the default settings of an application. Before building something by your own go and verify which exceptions are currently available and adapt your strategy accordingly. The following is based on the exceptions available at the time of writing Nov ’17. The exceptions are subject to change and Microsoft is constantly adding new paths to it. EnableADAL is listed under the registry key without \Policies\ but SilentAccountConfig is listed under \Policies\ path. Why the replacement of \Policies\ in the registry path?Įxcerpt from Win32 and Desktop Bridge app policy configuration (17th of November 2017)Ĭurrently, the ingested policies are not allowed to write to locations within the System, Software\Microsoft, and Software\Policies\Microsoft keys, except for the following locations:īecause of this exception we can use SOFTWARE\Microsoft\OneDrive to configure the both keys. As last step we replace SOFTWARE\ Policies\Microsoft\OneDrive with SOFTWARE\Microsoft\OneDrive. In this new node we rename the attribute values “name” and “valueName” to EnableADAL. As we have no node for EnableADAL in the ADMX file we duplicate policy node SilentAccountConfig as additional node under the policies node. ![]() Then we remove every policy node except the policy node with SilentAccountConfig. We need the original OnDrive.admx file as a template and we copy the complete policyDefinitions node to a new file. %LocalAppData%\Microsoft\OneDrive\- build-version-\adm\OneDrive.admx HKLM\SOFTWARE\Policies\Microsoft\OneDrive\SilentAccountConfig=1 (dword)Īs we do not have a native Configuration service provider for OneDrive right now we need to configure these settings via ADMX ingestion policy. ![]() HKCU\SOFTWARE\Microsoft\OneDrive\EnableADAL=1 (dword) According the article Use Group Policy to control OneDrive sync client settings we can use the following two registry keys for that: To solve this we need to configure OneDrive to silently setup the user account information from the Windows signed-in user. ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |