For more information, make sure to check out the Azure AD federation compatibility list. Select third-party identity providers (IdPs) are supported, but there are caveats. Silent account configuration won't work on devices for users who require multi-factor authentication. For info about using Azure AD Connect, see Getting started with Azure AD Connect using express settings. If you federate your on-premises Active Directory with Azure AD, you must use AD FS to enable this feature. Devices must be running one of the following operating systems: If you have an on-premises environment that uses Active Directory, you can enable hybrid Azure AD joined devices to join devices on your domain to Azure AD. To learn how, see Join your work device to your organization's network. You can join devices running Windows 10 and Windows Server 2016 directly to Azure AD. See all our recommendations for configuring the sync app Prerequisitesīefore you can enable silent account configuration, you need to join your devices to Azure AD. We recommend enabling silent account configuration when you configure the sync app. When the user is configured in the sync app, if the same user account is syncing files with the previous OneDrive for Business sync app (Groove.exe), the new sync app (OneDrive.exe) will attempt to take over syncing those files. For info about setting this threshold using Group Policy, see Set the maximum size of a user's OneDrive that can download automatically. If syncing the user's entire OneDrive would cause the available space to drop below 1 GB or if the size exceeds the threshold you set (on devices that don't have Files On-Demand enabled), OneDrive will prompt the user to choose folders to sync. That Windows account must be a Microsoft Azure Active Directory (Azure AD) account or be linked to an Azure AD account through a hybrid authentication configuration (see Prerequisites below).īefore OneDrive.exe begins syncing, it will check the available disk space. If you enable this feature, OneDrive.exe will attempt to silently (without user interaction) sign-in to the work or school user account that was used to sign into Windows (known as the Windows Primary Account). This feature works for computers that are joined to Azure Active Directory (Azure AD). This article is for IT admins who would like to silently configure user accounts when deploying the new OneDrive sync app (OneDrive.exe) to managed Windows computers in their enterprise.

Onedrive download is not readable