OneDrive for Business has a robust set of Group Policy settings that can be managed and that are targeted at both users and computers. These settings need to be made available on a domain controller so that Group Policies can be crafted using them. We examined these settings briefly in Chapter 9, Configuring and Managing OneDrive for Business, when we looked at configuring Silent Account Configuration.

The Group Policy template definition files are installed on a workstation where the OneDrive for Business sync client has been installed. By default, they are located in %LOCALAPPDATA%MicrosoftOneDrive<build>ADM. They need to be copied to a domain controller in the SYSVOL<domain>PoliciesPolicyDefinitions folder (the .ADMX file goes in PolicyDefintions, while the .ADML file goes in PolicyDefinitions<language>).

Once a Group Policy has been created for OneDrive, you can manage its settings. The following screenshot shows the Computer configuration policies:

The following screenshot shows the User configuration options:

Other popular client-side settings to configure include Use OneDrive Files on Demand and Require users to confirm large delete operations. The Files on Demand feature only stores content in the user's OneDrive for Business site while maintaining a pointer in their local OneDrive for Business folder and requires the Windows 10 Fall Creator's Update (version 1709). The option for Require users to confirm large delete operations can be used to help to prevent accidental bulk deletions.

Here are some settings that Microsoft makes recommendations for, specifically for policy settings for OneDrive operations:

• Limit the sync client upload rate to a percentage of throughput
• Limit the sync client upload speed to a fixed rate
• Prompt users to move Windows known folders to OneDrive

The next few sections will address these policy settings.