+This article describes the OneDrive Group Policy objects (GPOs) that administrators can configure by using Group Policy or by using [administrative templates in Microsoft Intune](configure-sync-intune.md). You can use the registry key information in this article to confirm that a setting is enabled.

+> If you're not an IT administrator, see [Sync files with the new OneDrive sync app in Windows](https://support.office.com/article/615391c4-2bd3-4aae-a42a-858262e42a49) for information about OneDrive sync settings.

+1. Install the OneDrive sync app for Windows. (To see builds that are being released and the download builds, see [release notes](https://support.office.com/article/845dcf18-f921-435e-bf28-4e24b95e5fc0?).) Installing the sync app downloads the .adml and .admx files.

+2. Browse to `%localappdata%\Microsoft\OneDrive\\*BuildNumber*\adm\` (for [per-machine sync app](per-machine-installation.md) browse to `%ProgramFiles(x86)%\Microsoft OneDrive\BuildNumber\adm\` or `%ProgramFiles%\Microsoft OneDrive\BuildNumber\adm\` (depending on the OS architecture)) to the subfolder for your language, as necessary (where *BuildNumber* is the number displayed in sync app settings on the **About** tab).

+4. Paste the .admx file in your domain's Central Store, `\\\\*domain*\sysvol\domain\Policies\PolicyDefinitions` (where *domain* is your domain name, such as corp.contoso.com), and the .adml file in the appropriate language subfolder, such as en-us. If the PolicyDefinitions folder doesn't exist, see [How to create and manage the Central Store for Group Policy Administrative Templates in Windows](https://support.microsoft.com/help/3087759), or use your local policy store under `%windir%\policydefinitions`.

+6. Link the GPOs to an Active Directory container (a site, domain or an organizational unit). For more information, see [Link Group Policy objects to Active Directory containers](/previous-versions/windows/desktop/Policy/linking-gpos-to-active-directory-containers).

+7. Use security filtering to narrow the scope of a setting. By default, a setting is applied to all user and computer objects within the container to which it's linked, but you can use security filtering to narrow the scope of the policy's application to a subset of users or computers. For more information, see [Filtering the scope of a GPO](/previous-versions/windows/desktop/Policy/filtering-the-scope-of-a-gpo).

+The OneDrive GPOs work by setting registry keys on the computers in your domain.

+- When you enable or disable a setting, the corresponding registry key is updated on computers in your domain. If you later change the setting back to **Not configured**, the corresponding registry key isn't modified, and the change doesn't take effect. After you configure a setting, set it to **Enabled** or **Disabled** going forward.

+> For information about storage, see [OneDrive Files On-Demand and Storage Sense for Windows 10](https://support.office.com/article/de5faa9a-6108-4be1-87a6-d90688d08a48) and [Policy CSP - Storage](/windows/client-management/mdm/policy-csp-storage).

+- (DisableNewAccountDetection) [Hide the messages to sync Consumer OneDrive files](use-group-policy.md#hide-the-messages-to-sync-consumer-onedrive-files)

+This setting lets the OneDrive sync app remove all inherited permissions within read-only folders syncing on a user's PC. This removal of inherited permissions improves the performance of the sync app when syncing folders that the user has read-only permission to.

+If you enable this setting, users get an error if they attempt to add an account from an organization that isn't allowed. If a user has already added the account, the files stop syncing.

+This setting lets you specify a minimum amount of available disk space and block the OneDrive sync app (OneDrive.exe) from downloading files when users have less than this amount.

+This setting does NOT work if you [Allow syncing OneDrive accounts for only specific organizations](use-group-policy.md#allow-syncing-onedrive-accounts-for-only-specific-organizations) enabled. Don't enable both settings at the same time.

+This feature isn't enabled for on-premises SharePoint sites.

+For information about querying and setting file and folder states, see [Query and set Files On-Demand states](files-on-demand-mac.md).

+If you enable this setting, the sync app upload rate will be set to **Adjust automatically** based on bandwidth availability, and users won't be able to change it.

+If you don't configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to **Adjust automatically**.

+> If you enable or disable this setting, and then change it back to **Not Configured**, the last configuration will remain in effect. We recommend enabling this setting instead of **Limit the sync app upload speed to a fixed rate**. You should not enable both settings at the same time. This setting will override **Limit the sync app upload rate to a percentage of throughput** if both are enabled on the same device.

+If you enable this setting, the OneDrive sync app will report device and health data to include in administrative sync reports. You must enable this setting on the devices you want to get reports from.

+This setting lets you enter keywords to prevent the OneDrive sync app (OneDrive.exe) from uploading certain files to OneDrive or SharePoint. You can enter complete names, such as "setup.exe", or use the asterisk (*) as a wildcard character to represent a series of characters, such as *.pst. Keywords aren't case-sensitive.

+If you enable this setting, the sync app doesn't upload new files that match the keywords you specified. No errors appear for the skipped files, and the files remain in the local OneDrive folder.

+> This setting will only block files that match your specification. It won't apply to existing files that are renamed to match the specified keywords. Additionally, new files that are created inside the synced folder and named to match the specified keywords will also not be blocked.

+In File Explorer, the files appear with an "Excluded from sync" icon in the **Status** column. The OneDrive sync app must be restarted after this setting is enabled for the setting to take effect.

+Users will also see a message in the OneDrive activity center that explains why the files aren't syncing.

+> Users can still browse to their OneDrive in a web browser to upload a file that has been excluded from their local OneDrive folder. We recommend that users remove the local file after doing this upload because having a file with the same name in the same folder will result in a sync conflict with the skipped file.

+If you disable or don't configure this setting, all supported files in all synced folders will be uploaded.

+> This setting gives you more flexibility than the [Block syncing of specific file types setting](block-file-types.md) in the admin center. Also, with this setting, users don't see errors for the excluded files. <br> This setting doesn't support upload of Office files that are being excluded. All other file types are supported.

+When a user deletes local files from a synced location, a warning message appears that the files will no longer be available across all the devices of the user and on the web. This setting lets you hide the warning message.

+If you enable this setting, users won't see the **Deleted files are removed everywhere** reminder when they delete files locally. (This reminder is called "Deleted files are removed for everyone" when a user deletes files from a synced team site.)

+If you disable or don't configure this setting, the reminder will appear until users select **Don't show this reminder again**.

+### Hide the messages to sync Consumer OneDrive files

+<a name="syncconsumeronedrive"> </a>

+This setting determines whether a user will be prompted to sync their Consumer files using a detected known Microsoft Account (MSA).

+**Enable**: Enable this setting if you want to suppress the messages from being displayed to your users, yet allow them to manually configure their Consumer accounts to sync with their OneDrive Consumer files.

+Enabling this policy sets the following registry key value to 1:

+`[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"DisableNewAccountDetection"=dword:00000001`

+**Disable**: Disable this setting or don't configure it, to allow your users to be prompted to sync their Consumer files.

+This setting lets you balance the performance of different upload tasks on a computer by specifying the percentage of the computer's upload throughput that the OneDrive sync app (OneDrive.exe) can use to upload files. Setting this throughput as a percentage lets the sync app respond to both increases and decreases in throughput. The lower the percentage you set, the slower the files get uploaded. We recommend a value of 50% or higher. The sync app periodically uploads without restriction for one minute and then slows down to the upload percentage you set. This pattern lets small files upload quickly while preventing large uploads from dominating the computer's upload throughput. We recommend enabling this setting temporarily when you roll out [Silently move Windows known folders to OneDrive](use-group-policy.md#silently-move-windows-known-folders-to-onedrive), or [Prompt users to move Windows known folders to OneDrive](use-group-policy.md#prompt-users-to-move-windows-known-folders-to-onedrive) to control the network impact of uploading known folder contents.

+> The maximum throughput value detected by the sync app can sometimes be higher or lower than expected because of the different traffic throttling mechanisms that your Internet Service Provider (ISP) might use. <br>For information about estimating the network bandwidth you need for a sync, see [Network utilization planning for the OneDrive sync app](network-utilization-planning.md).

+Enabling this policy sets the following registry key to a value described in the following example:

+If you disable or don't configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to **Adjust automatically**, which sets the upload rate to 70% of throughput. For information about the end-user experience, see [Change the OneDrive sync app upload or download rate](https://support.office.com/article/71cc69da-2371-4981-8cc8-b4558bdda56e).

+> If you enable or disable this setting, and then change it back to **Not Configured**, the last configuration remains in effect. We recommend enabling this setting instead of **Limit the sync app upload speed to a fixed rate** to limit the upload rate. You should not enable both settings at the same time.

+This setting lets you block the OneDrive sync app (OneDrive.exe) from generating network traffic (checking for updates) until users sign in to OneDrive or start syncing files on their computer.

+If you disable or don't configure this setting, the OneDrive sync app starts automatically when users sign in to Windows.

+> If you enable or disable this setting, and then change it back to **Not Configured**, the last configuration remains in effect.

+If you enable this setting, users aren't prompted with a window to protect their important folders, and the *Manage backup* command is disabled. If the users have already moved their known folders, the files in those folders will remain in OneDrive. To redirect the known folders back to the user's device, select **No**. This setting doesn't take effect if you've enabled Prompt users to move Windows known folders to OneDrive or **Silently move Windows known folders to OneDrive**.

+If you disable or don't configure this setting, users can choose to redirect their known folders back to their PC.

+Enabling this policy sets the following registry key value to 1:

+The B2B Sync feature of the OneDrive sync app lets users at an organization to sync OneDrive and SharePoint libraries and folders shared with them from another organization. For more information, see [B2B Sync](b2b-sync.md).

+If you enable this setting and provide your tenant ID, users who are syncing their OneDrive see the previous window when they're signed in. If they close the window, a reminder notification appears in the Activity Center until they move all their known folders. If users have already redirected their known folders to a different OneDrive account, they are prompted to direct the folders to the account for your organization (leaving existing files behind).

+Enabling this policy sets the following registry key to the value shown in the following example:

+For information and recommendations, see [Redirect and move Windows known folders to OneDrive](redirect-known-folders.md).

+> Even if you enable this policy, users won't receive notifications if they've checked the **Always remove files** checkbox on a previous notification, or if they've unchecked the **Notify me when many files are deleted in the cloud** checkbox in OneDrive sync app settings.

+To enter the tenant ID and the maximum size in MB (from 0 to 4294967295), in the **Options** box, select **Show**. The default value is **500**.

+where "1111-2222-3333-4444" is the [tenant ID](find-your-office-365-tenant-id.md) and "0005000" sets a threshold of "5000 MB".

+We release OneDrive sync app (OneDrive.exe) updates to the public through three rings- first to Insiders, then Production, and finally Deferred. This setting lets you specify the ring for users in your organization. When you enable this setting and select a ring, users can't change it.

+> We recommend selecting several people in your IT department as early adopters to join the Insiders ring and receive features early. We recommend leaving everyone else in the organization in the default Production ring to ensure they receive bug fixes and new features in a timely fashion. [See all our recommendations for configuring the sync app.](ideal-state-configuration.md)

+Set the value **4** for Insider, **5** for Production, or **0** for Deferred. When you configure this setting to **5** for Production, or **0** for Deferred, the "Get OneDrive Insider preview updates before release", in the sync app, the checkbox doesn't appear on the **Settings > About** tab.

+For more information on the builds currently available in each ring, see the [release notes](https://support.office.com/article/845dcf18-f921-435e-bf28-4e24b95e5fc0?). For more information about the update rings and how the sync app checks for updates, see [The OneDrive sync app update process](sync-client-update-process.md).

+Use this setting to redirect and move your users' Documents, Pictures, and/or Desktop folders to OneDrive without any user interaction.

+> We recommend deploying the silent policy for existing devices and new devices while limiting the deployment of existing devices to 1,000 devices a day and not exceeding 4,000 devices a week. We also recommend using this setting together with [Prompt users to move Windows known folders to OneDrive](use-group-policy.md#prompt-users-to-move-windows-known-folders-to-onedrive). If moving the known folders silently doesn't succeed, users will be prompted to correct the error and continue. [See all our recommendations for configuring the sync app.](ideal-state-configuration.md)

+You can move all folders at once or select the folders you want to move. After a folder is moved, this policy won't affect that folder again, even if you uncheck the checkbox for the folder.

+Setting this value to **1** shows a notification after successful redirection.

+If you don't set any of the following policies, then the default policy will move all the folders (Desktop, Documents and Pictures) into OneDrive. If you want to specify the folder(s) to move, then you can set any combination of the following policies:

+`[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInDesktop"=dword:00000001`: Setting this value to **1** will move the Desktop folder.

+`[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInDocuments"=dword:00000001`: Setting this value to **1** will move the Documents folder.

+`[HKLM\SOFTWARE\Policies\Microsoft\OneDrive]"KFMSilentOptInPictures"=dword:00000001`: Setting this value to **1** will move the Pictures folder.

+For more information, see [Redirect and move Windows known folders to OneDrive](redirect-known-folders.md).

+> [Azure Active Directory Authentication Library](/azure/active-directory/develop/active-directory-authentication-libraries) (ADAL) is enabled automatically when the sync user is provisioned via `SilentAccountConfig`; so you don't have to enable it separately.

+If you enable this setting, users who are signed in on a PC that's joined to Azure AD can set up the sync app without entering their account credentials. Users will still be shown OneDrive Setup so that they can select folders to sync and change the location of their OneDrive folder. If a user is using the previous OneDrive for Business sync app (Groove.exe), the new sync app attempts to take over syncing the user's OneDrive from the previous app, and preserves the user's sync settings. This setting is frequently used together with [Set the maximum size of a user's OneDrive that can download automatically](use-group-policy.md#set-the-maximum-size-of-a-users-onedrive-that-can-download-automatically) on PCs that don't have Files On-Demand and with [Set the default location for the OneDrive folder](use-group-policy.md#set-the-default-location-for-the-onedrive-folder).

+> We recommend enabling silent account configuration when you configure the sync app. [See all our recommendations for configuring the sync app.](ideal-state-configuration.md)

+For more information about this feature, including troubleshooting steps, see [Silently configure user accounts](use-silent-account-configuration.md).

+This setting is for customers who have SharePoint Server 2019. For information about using the new OneDrive sync app with SharePoint Server 2019, see [Configure syncing with the new OneDrive sync app](/SharePoint/install/configure-syncing-with-the-onedrive-sync-app/).

+This setting is for customers who have SharePoint Server 2019. For information about using the new OneDrive sync app with SharePoint Server 2019, see [Configure syncing with the new OneDrive sync app](/SharePoint/install/configure-syncing-with-the-onedrive-sync-app/).

+This setting lets you control whether OneDrive Files On-Demand is enabled for your organization. Files On-Demand helps you save storage space on your users' computers, and minimize the network impact of a sync. The feature is available to users running Windows 10 Fall Creators update (version 1709 or later). For more information, see [Save disk space with OneDrive Files On-Demand for Windows 10](https://support.office.com/article/0e6860d3-d9f3-4971-b321-7092438fb38e).

+> We recommend keeping Files On-Demand enabled. [See all our recommendations for configuring the sync app.](ideal-state-configuration.md)

+If you enable this setting, new users who set up the sync app see online-only files in File Explorer, by default. File contents don't download until a file is opened. If you disable this setting, Windows 10 users have the same sync behavior as users of previous versions of Windows, and aren't able to turn on Files On-Demand. If you don't configure this setting, users can turn on or off the Files On-Demand option.

+Meet Windows and OneDrive sync app requirements and still can't see Files On-Demand option available at "Settings"? Ensure the service "Windows Cloud Files Filter Driver" start type is set to **2** (AUTO_START). Enabling this feature sets the following registry key value to 2:

+This setting specifies what happens when conflicts occur between Office file versions during a sync. (This option is available for Office 2016 or later only. With earlier versions of Office, both copies are always kept.)

+If you enable this setting, users can decide if they want to merge changes or keep both copies.

+If you disable this setting, when a sync conflict occurs, both copies of the file are kept.

+To enable this setting, you must enable [Coauthor and share in Office desktop apps](#coauthor-and-share-in-office-desktop-apps).

+> We recommend keeping this setting enabled to make syncing faster and reduce network bandwidth. [See all our recommendations for configuring the sync app.](ideal-state-configuration.md)

+If you disable this setting, coauthoring and in-app sharing for Office files is disabled. When file conflicts occur, both copies of the file are kept.

+

+> Don't enable this setting to the same library with more than 1,000 devices.

+To configure the setting, in the **Options** box, select **Show**, enter a friendly name to identify the library in the **Value Name** field, and then the entire library ID (tenantId=xxx&siteId=xxx&webId=xxx&listId=xxx&webUrl=httpsxxx&version=1) in the **Value** field.

+If you disable or don't configure this setting, syncing pauses automatically when a metered network is detected, and a notification appears. To not pause, in the notification, select **Sync Anyway**. When syncing is paused, to resume syncing, in the notification area of the taskbar, select the OneDrive cloud icon, and at the top of the Activity Center, select the alert.

+If you disable or don't configure this setting, syncing pauses automatically when battery saver mode is detected, and a notification appears. To not pause, in the notification, select **Sync Anyway**. When syncing is paused, to resume syncing, in the notification area of the taskbar, select the OneDrive cloud icon, and at the top of the Activity Center, select the alert.

+We recommend that you use this setting in cases where Files On-Demand is NOT enabled, and where strict traffic restrictions are required, such as when you initially deploy the sync app in your organization or enable syncing of team sites. We don't recommend that you use this setting on an ongoing basis because it decreases sync app performance and negatively impacts the user experience. After the initial sync, users typically sync only a few files at a time, and it doesn't have a significant effect on network performance. If you enable this setting, computers use the maximum download rate that you specify, and users can't change it.

+If you disable or don't configure this setting, the download rate is unlimited, and users can choose to limit it in OneDrive sync app settings. For information about the end-user experience, see [Change the OneDrive sync app upload or download rate](https://support.office.com/article/71cc69da-2371-4981-8cc8-b4558bdda56e).

+For information about estimating the network bandwidth you need for a sync, see [Network utilization planning for the OneDrive sync app](network-utilization-planning.md).

+If you enable this setting and enter the rate (from 1 to 100000) in the **Bandwidth** box, computers use the maximum upload rate that you specify, and users can't change it in OneDrive settings. The maximum rate is 100000 KB/s. Any input lower than 50 KB/s sets the limit to 50 KB/s, even if the UI shows a lower value.

+If you disable or don't configure this setting, users can choose to limit the upload rate to a fixed value (in KB/second), or set it to **Adjust automatically** which sets the upload rate to 70% of throughput. For information about the end-user experience, see [Change the OneDrive sync app upload or download rate](https://support.office.com/article/71cc69da-2371-4981-8cc8-b4558bdda56e).

+Enabling this policy sets the following registry key value to a number from 50 through 100,000:

+For information about estimating the network bandwidth you need for a sync, see [Network utilization planning for the OneDrive sync app](network-utilization-planning.md).

+To use this setting, in the **Options** box, select **Show**, and enter your [tenant ID](find-your-office-365-tenant-id.md). To enable the setting, enter **1**; to disable it, enter **0**.

+If you enable this setting, users are prevented from setting up a sync relationship for their personal OneDrive account. Users who are already syncing their personal OneDrive when you enable this setting can't continue syncing (they receive a message that syncing has stopped), but any files synced to the computer remain on the computer.

+For more information about the update rings and how the sync app checks for updates, see [The OneDrive sync app update process](sync-client-update-process.md).

+If you enable this setting, the default location of the *OneDrive - {organization name}* folder is the path that you specify. To specify your tenant ID and the path, in the **Options** box, select **Show**.

+- Your system is running SharePoint Server 2016, SharePoint Server 2019, or SharePoint Server Subscription Edition.

+> [!NOTE]

+> The basic scenario is not available for SharePoint Server 2019 or SharePoint Server Subscription Edition.

+> [!NOTE]

+> The IIS 6 management features used by the IIS SMTP service have been [deprecated](/windows-server/get-started/removed-features-1709). Administrators should instead use ΓÇ£Advanced ModeΓÇ¥ and configure an e-mail drop folder, as detailed in [Does SharePoint 2019 still need the SMTP Service](https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/does-sharepoint-2019-still-need-the-smtp-service/ba-p/307705).

+> [!NOTE]

+> Automatic mode is not available in SharePoint Server 2019 or SharePoint Server Subscription Edition.

+ If you select this option and you are using Exchange Server, you must configure the DNS Manager and add an SMTP connector. For more info, see [Configure DNS Manager](incoming-email-configuration.md#ConfigureDNSManager), [Add an SMTP connector in Microsoft Exchange Server 2016](incoming-email-configuration.md#AddSMTPconnector) later in this article. The AD DS has most likely already been configured, so you do not need to do this.

+If you use the **E-mail server display address** option and if the email address to which you are sending email messages is not the same as your server name, you must create a local domain.

+An SMTP connector gives you more control over the message flow in your organization. Other reasons to use an SMTP connector are to set delivery restrictions or to specify a specific address space. If you use Exchange Server to route incoming email to SharePoint lists and libraries, you must have an SMTP connector so that all mail that is sent to the SharePoint domain uses the servers that are running the SMTP service.

+> [!Important]

+> A ΓÇ£Send ConnectorΓÇ¥ should only be selected if you are using a local IIS SMTP service on the SharePoint servers, which has been [deprecated](/windows-server/get-started/removed-features-1709) in Windows Server.

+> If you are using an e-mail drop folder, which is required for SharePoint Server 2019 and SharePoint Server Subscription Edition, a **Foreign Connector** must be used, as outlined in [Does SharePoint 2019 still need the SMTP Service](https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/does-sharepoint-2019-still-need-the-smtp-service/ba-p/307705).

+[Plan incoming email for a SharePoint Server farm](incoming-email-planning.md)

+> [!Important]

+> The ΓÇ£Automatic ModeΓÇ¥ used in the "basic scenario" utilizes a local IIS SMTP service. That functionality was [removed from SharePoint Server 2019](../what-s-new/what-s-deprecated-or-removed-from-sharepoint-server-2019.md#incoming-email-automatic-mode) and SharePoint Server Subscription Edition. Administrators should instead use ΓÇ£Advanced ModeΓÇ¥ and configure an e-mail drop folder, as detailed in [Does SharePoint 2019 still need the SMTP Service](https://techcommunity.microsoft.com/t5/microsoft-sharepoint-blog/does-sharepoint-2019-still-need-the-smtp-service/ba-p/307705).

+> [!NOTE]

+> Automatic mode is not available in SharePoint Server 2019 or SharePoint Server Subscription Edition.

+> Automatic mode is not available in SharePoint Server 2019 or SharePoint Server Subscription Edition.