Syntax to add OneDrive Known Folder Move folders to Controlled Folder Access policy

IMK 421 Reputation points
2023-02-22T13:07:33.0033333+00:00

Hi

We are using Intune to set OneDrive to move Known Folders to OneDrive. We also have enabled Controlled Folder Access.

What I have understood, when Desktop, Documents and Pictures folders are moved to OneDrive, the default controlled folders do not protect these folders when they are moved to OneDrive. So I have to add these folders in OneDrive to Controlled Folders policy.

But what is the correct syntax?

Is it

%userprofiles%\OneDrive - Company name\Desktop

%userprofiles%\OneDrive - Company name\Documents

%userprofiles%\OneDrive - Company name\Pictures

OneDrive Management
OneDrive Management
OneDrive: A Microsoft file hosting and synchronization service.Management: The act or process of organizing, handling, directing or controlling something.
1,184 questions
Microsoft Intune Security
Microsoft Intune Security
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
370 questions
Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,784 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,665 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. IMK 421 Reputation points
    2023-02-22T15:26:51.6533333+00:00

    Actually, now that I checked again via device Defender app, Defender has regocnized that Documents -folder and Pictures -folder is in OneDrive and is showing the OneDrive path for these folders in Protected Folders list.

    But because Desktop folder is not in default protected folders list, I would need to add it myself in the list.

    But what do I add to Controlled Folder Access Protected Folders list in Endpoint Security profile list? Is it

    %userprofiles%\OneDrive - Company name\Desktop

    or

    %userprofiles%\Desktop

    0 comments
  2. IMK 421 Reputation points
    2023-02-26T10:38:39.5966667+00:00

    Anyone? Haven't anyone added OneDrive folders to Protected Folders??

    0 comments