OneDrive sync in the multi shared pc profile
We have some organizations with shared devices.
Parttime users using the same device.
Intune can not handle this with the compliance policies so we setup an shared pc Configuration profile.
This is working fine but we are missing the OneDrive sync
Anonymous
shared this idea
18 comments
-
Hasse
commented
An even better option is to NOT allow OneDrive File Sync but rather OneDrive folder with OneDrive DISPLAY of files, not actually syncing them. files on demand but prohibiting sync. All files with cloud icon. that would be useful since a lot of older computer users have a hard time letting go of file explorer.
-
Anonymous
commented
We need this feature for parttime employees, who share one device.
-
Rob
commented
found this work around on reddit, until MS gets around to fixing this.. seems to work, need to test more tho
https://www.reddit.com/r/Intune/comments/fafl0c/onedrive_sync_with_shared_multiuser_device_config/
Worked through this with an MS engineer, he gave us this solution which works great:
./Device/Vendor/MSFT/Policy/Config/System/DisableOneDriveFileSync (Integer = 0)
./Device/Vendor/MSFT/Policy/Config/ControlPolicyConflict/MDMWinsOverGP (Integer = 1)
The first CSP enables OneDrive File Sync (Disable=0, so Enable) which is required for the client to function, and the second CSP tells the device to let MDM policy supersede local group policy, which is what SharedPC uses to block file sync.
-
Anonymous
commented
Not allowing One Drive sync is the reason the Shared PC mode is useless for me. Please allow One Drive Sync in Shared PC mode
-
Anonymous
commented
This option would be really useful, many user still use desktop apps with SharedPC mode and being able to save straight into OneDrive would be a massive quality of life improvment.
At the moment users have to safe to the Downloads folder and then manually drag-drop into OneDrive.
I understand concerns of disk usage but surely it would be possible to combine it with a more aggressive cloud-only sync policy that deletes local content as often as it can (when safe to do so) and resets files/folders back to cloud-only.
-
Steven
commented
I understand that the choice to disable it may have something to do with account maintenance (e.g. users filling up the entire drive with their OneDrive sync or perhaps the profile delete operation may affect OneDrive data when it starts deleting it). However, we have shared Surface devices for use out in the field. The end-users would like to sync data from SharePoint to the device because once they start their inspections, they're going to be offline. It would be nice if they could leverage OneDrive to make this easy. Otherwise, utility wins over IT convenience so we cannot use Shared PC mode to leverage its benefits.
-
Ian Bruckner
commented
Grah! you can't even undo that decision by way of adding an admin template setting in intune since the more restrictive one (shutting it off) wins! So instead, I have to remake the shared pc mode step by step just without that one setting? Looks like others have tried but didn't quite make it all the way.
-
Myles
commented
Take a look at Zee Drive to map network drives to OneDrive for Business and SharePoint Online. It will provide "online only" like access to files and has specific support for shared (hot desk) computers http://www.thinkscape.com/Map-Network-Drives-To-Office-365-OneDrive/
-
Christian Krüsi
commented
Why not let choose the admin as an intune setting? We can't use the shared device settings without OneDrive sync. We also use known folder move to OneDrive.
-
Rob de Roos
commented
Why disabeling the whole sync client. Just let the Sync Client work online only. As it is now users aren't able to open or save files from 3rd party applications from their onedrive or synced sharepoint sites.
Microsoft apps are ready for this but most 3rd party apps aren't. This is a big problem for modern managed shared devices! Simply said we CANNOT use shared device policies if we have 3rd party apps that are using explorer to browse for or save files to onedrive!
-
Nathan
commented
So, like, is this ever going to be looked at? This is pretty ridiculous
-
Sam Lourie
commented
Please enable this feature.
-
Chris Brockett
commented
SharedPCMode disabling onedrive makes no sense! Please remove this part of it.
-
Dave King
commented
ChromeOS does get this right.
I don't see why OneDrive would be disabled by the SharedPC CSP, could anyone explain the logic behind the decision?
-
Christian Krüsi
commented
Please add a possibility to allow Sync Client with shared device settings. Thanks.
-
Anonymous
commented
Please don't disable onedrive on shared computers!
-
D. Vleeshakker
commented
@Matt White,
Can you please tell me how to reproduce to account management from the Shared Device Policy without using the Shared PC Mode so we can use OneDrive?
-
Matt White
commented
This is a really useful feature to have. There are additional benefits in Shared Multi-User device that will enable a more fully functional shared Win10 PC that needs to be more than a Kiosk.
When we redirect personal data to OneDrive this becomes an issue. You can reproduce most of the settings in the Shared Multi-user device policy except for the consistent disabling of Hello PIN (support ticket raised) and the Sign Out button at the bottom of the lock screen