Configure OneDrive Auto Sign-in Using Microsoft Intune

Open your web browser and navigate to the Microsoft Intune admin center. Sign in with your Intune Administrator or Global Administrator credentials.

https://endpoint.microsoft.com

Once logged in, you'll see the main dashboard with various management options. The admin center provides centralized control for all your Intune policies and device management tasks.

From the Intune admin center dashboard, navigate to the configuration policies section where you'll create the OneDrive auto sign-in policy.

Click through this navigation path:

• Devices → Windows → Configuration → Create → New policy

This opens the policy creation wizard where you'll define the platform and profile type for your OneDrive configuration.

In the policy creation dialog, configure the following settings:

• Platform: Select "Windows 10 and later"
• Profile: Select "Settings catalog"

The Settings catalog is Microsoft's modern approach to device configuration, replacing traditional administrative templates. It provides granular control over Windows settings with a searchable interface.

Click Create to proceed to the policy configuration wizard.

On the Basics tab, provide clear identification for your policy:

• Name: OneDrive Auto Sign-in Configuration
• Description: Enables automatic sign-in to OneDrive using Windows credentials for enrolled devices

Use descriptive names that clearly indicate the policy's purpose. This helps with policy management as your environment grows.

Click Next to proceed to the configuration settings.

This is the core step where you configure the actual OneDrive auto sign-in behavior. Click Add settings to open the settings browser.

In the search box, type:

silently sign in users to the OneDrive

From the search results, expand the OneDrive category and locate:

Silently sign in users to the OneDrive Sync app with their Windows credentials

Select this setting and configure it:

• Setting value: Enabled

This setting instructs Windows to automatically authenticate users to OneDrive using their existing Windows login credentials, eliminating the need for separate OneDrive authentication.

Click Add to include this setting in your policy, then click Next.

While the auto sign-in setting is sufficient for basic functionality, consider adding these complementary settings for better security and management:

Search for and add these optional settings:

• "Prevent users from syncing personal OneDrive accounts" - Set to Enabled to enforce business-only OneDrive usage
• "Use OneDrive Files On-Demand" - Set to Enabled to save local storage space
• "Set the sync app update ring" - Choose appropriate update cadence

Search terms:
- prevent users from syncing personal
- use onedrive files on-demand
- set the sync app update ring

After adding desired settings, click Next to continue.

On the Scope tags page, add scope tags if your organization uses them for policy management. For most environments, you can skip this step by clicking Next.

On the Assignments page, specify which users or devices will receive this policy:

• Include: Select "Add groups" and choose your target groups
• Exclude: Optionally exclude specific groups if needed

Common assignment strategies:

• All Users: Apply to everyone with OneDrive licenses
• Department Groups: Target specific departments for phased rollout
• Device Groups: Apply based on device type or location

Click Next after configuring assignments.

On the Review + create page, carefully verify all policy settings:

• Policy name: OneDrive Auto Sign-in Configuration
• Platform: Windows 10 and later
• Profile type: Settings catalog
• Key setting: Silently sign in users to OneDrive - Enabled
• Assignments: Verify correct groups are targeted

Review the configuration summary to ensure all settings match your requirements. Pay special attention to the assignment scope to avoid unintended policy application.

Click Create to deploy the policy.

After creating the policy, monitor its deployment and test the functionality on target devices.

Check policy status:

Navigate to Devices → Windows → Configuration and locate your policy. Click on it to view deployment status and any errors.

Test on a target device:

1. On a test device, sign out of OneDrive completely if currently signed in
2. Close the OneDrive application
3. Force a policy sync by opening Command Prompt as administrator and running:

gpupdate /force

Or trigger Intune sync from Settings → Accounts → Access work or school → [Your organization] → Info → Sync.

4. Restart the OneDrive application or restart the device
5. OneDrive should automatically sign in without prompting for credentials