Onedrive Sync Client - Per Machine Install

[nickbro]

It won't SSO, you have to click the sign in button first time. It should auto populate the email address though. Or at least that's the experience I've had with it. Once the user clicks sign in, off it goes

[synaesthesia]

The documentation etc suggests it should occur with the silentconfiguration flag. Still, nothing gets filled in, not even putting in email address manually automatically logs in like email does

[gshaw]

It won't SSO, you have to click the sign in button first time. It should auto populate the email address though. Or at least that's the experience I've had with it. Once the user clicks sign in, off it goes

Urgh that's a deal breaker for me, glad I haven't deployed now [emoji52]

[jtotheb]

Can't get this to play ball at all Installs fine, just never seems to automatically log on. Only want it as files on demand, machine is registered in AAD and SSO works fine for browsers to get to email etc. Seem to be missing something but can't track down what that might be

 

Are you using the OneDrive group policy templates to populate the email address, tenancy etc?

[synaesthesia]

Location yes, not email address (uses windows signon credentials, supposedly!)

[PeterH]

It should log in completely automatically. Ours does. No sign in required. Check your Azure hybrid domain join is working:

 

dsregcmd /status

 

Should show AzureADJoined: YES

 

If not check here: Troubleshoot Azure Hybrid Domain Join

[jtotheb]

Location yes, not email address (uses windows signon credentials, supposedly!)

 

There's an explicit "Silently sign in users to the OneDrive sync client with their Windows credentials" policy under the Computer Configuration node if it isn't doing it automagically. That seemed to do the trick here when it wasn't auto-populating.

[synaesthesia]

Yeah, as mentioned that's enabled. Likewise, they're connected OK to AzureAD with dsregcmd. They log in automatically to Office without issue and that also links through to Onedrive & Sharepoint as expected. Baffled. Edited April 30, 2019 by synaesthesia

[gshaw]

Yeah, as mentioned that's enabled. Likewise, they're connected OK to AzureAD with dsregcmd. They log in automatically to Office without issue and that also links through to Onedrive & Sharepoint as expected. Baffled.

 

Don't know if it still applies but is the EnableADAL registry key set?

[synaesthesia]

It is; I had the same thought as I'm sure I've read somewhere that's now taken care of, but had put it back in just in case.

[jnfarmer]

Make sure you have 'Enable Integrated Windows Authentication' ticked in IE options. I was bashing my head against this for months before finding out that needed to be ticked as well.

[Dipsomaniac]

Installed and working great in our classrooms. However some people had sharepoint sites synced to their office computers and this per-machine OneDrive client doesn't seem to want to play ball with them.

 

Anyone else experiencing this issue?

[ifillingham]

Hi there,

 

I'm glad Microsoft have introduced this feature. I have a question though that I hope someone may be able to help with.

 

We have teacher computers in classrooms and most teachers also have laptops that are taken home. If a group policy is used in order to save space on the teacher PCs (e.g. to delete the files synced from OneDrive when the user logs off), I am assuming the same group policy will be applied when the teacher logs onto/off their laptop. This may cause some concerns but would we be able to get round this by using the sync on demand feature in OneDrive?

 

I hope this makes sense as I'm just dipping my foot into thing at the minute.

Thanks a lot,

Ian

[techie17]

Has anyone found that the Onedrive right click context menu has disappeared when doing a per machine install?

[mullet_man]

I've added this to my TS for OSD, does the app then update as normal like it did per user?

[3s-gtech]

Just testing this - it installs and tuns fine. I’m very late to the party with OneDrive though - it doesn’t like the ‘local’ folder being on a network drive and my users can’t access it in C:\. I can’t effectively symlink from there as they can’t browse to the linked folder. How do others do it? I see suggestions of iSCSI drives - would a subst to a network drive work?

[Silica]

Just wondering how everyone managed the SCCM application deployment of this?

During the application creation wizard, it asks when the application should be installed (during user being logged on etc.) I can only assume it's best done when users are logged off to prevent any issues if they have files open in OneDrive?

[free780]

Should be like this:

 

Start-Process -Wait "$PSScriptRoot\OneDriveSetup.exe" -ArgumentList "/silent /allusers" -Verbose

 

I used a Powershell script due to replacing the built in "C:\Windows\SysWOW64\OneDriveSetup.exe" with the latest Onedrive. I automated the download of the latest client to a server.

[AndreasUK2809]

Yeah, as mentioned that's enabled. Likewise, they're connected OK to AzureAD with dsregcmd. They log in automatically to Office without issue and that also links through to Onedrive & Sharepoint as expected. Baffled.

 

I've read online that apparently you need to have Seamless SSO enabled on your Azure AD Connector in order to work with the silentconfig GPO. Ours is disabled and it's not working and most likely our security team will kick off if i ever suggest to enable it. Baffled as well.

 

Wonder if if there's a way to pass on a parameter with the user's email address at logon to automatically sign them in.

[DrCheese]

and most likely our security team will kick off if i ever suggest to enable it. Baffled as well.

 

That's being overly paranoid if I've ever seen it - We're schools, not MOD departments...

[AndreasUK2809]

For those that silent config is working, can you confirm is Seamless SSO is enabled on your Azure AD Connector pls? The whole thing is just doing my head in now!

 

Cheers

Andy

[Silica]

For those that silent config is working, can you confirm is Seamless SSO is enabled on your Azure AD Connector pls? The whole thing is just doing my head in now!

 

Cheers

Andy

 

 

I am not sure what seamless SSO is, but for us we had to ensure Azure AD Connect was set up and running and the computer object AD Azure creates in AD was active.. i once deleted it as i wasn't sure what it was and broke SSO until i recovered it from AD recycling bin.

[AndreasUK2809]

I am not sure what seamless SSO is, but for us we had to ensure Azure AD Connect was set up and running and the computer object AD Azure creates in AD was active.. i once deleted it as i wasn't sure what it was and broke SSO until i recovered it from AD recycling bin.

 

 

Attaching a screenshot.

 

Ignore mine that says it's not installed. This is a screenshot from my personal tenant.

 

If you logon to your azure portal, under Azure AD --> Azure AD Connect --> Seamless SSO

[Silica]

[ATTACH=CONFIG]57838[/ATTACH]

 

Attaching a screenshot.

 

Ignore mine that says it's not installed. This is a screenshot from my personal tenant.

 

If you logon to your azure portal, under Azure AD --> Azure AD Connect --> Seamless SSO

 

Yes ours is enabled and names our domain. I'm sure this is required now it's jogged my memory.

 

Have you configured GPP too? https://docs.microsoft.com/en-us/onedrive/use-silent-account-configuration

[AndreasUK2809]

Yes ours is enabled and names our domain. I'm sure this is required now it's jogged my memory.

 

Have you configured GPP too? https://docs.microsoft.com/en-us/onedrive/use-silent-account-configuration

 

Yes done all that. All GPO/GPP work just fine. Only silent config is not working!

 

But thanks for clearing that out!