azure ad and powershell scripts

[sted]

ive got a test setup where im trying to get single sign on working.

 

the user signs into azure fine (i have no normal ad backend its pure azure ad) and on first logon it installs office and tells them to encrypt the drive as per policies. sso works for the office apps and email in edge but one drive dosent. ive found you need to add a couple of reg keys then it works fine. ive tested this and yes onedrive auto signs in no issues. my problem is automating this. i have written 2 powershell scripts to do this (see below) and added them to intune device config powershell scripts but they dont seem to be running on the machine any ideas? (as one as current user and ones local machine ive split them in 2 to run but pasted them here as 1)

 

[color=#000000][font=Arial]new-item 'hkcu:\Software\Microsoft\OneDrive -Force | New-ItemProperty -Name EnableADAL -Value 1 -Force | Out-Null[/font][/color]
[color=#000000][font=Arial]new-item 'hklm:\SOFTWARE\Policies\Microsoft\Onedrive' -Force | New-ItemProperty -Name SilentAccountConfig -Value 1 -Force | Out-Null[/font][/color]
[color=#000000][font=Arial]

 

intune is showing 0 success 0 fails for those scripts[/font][/color]