OneDrive and Known Folder Move: a headache-free rollout
How to deploy OneDrive with Known Folder Move to protect Desktop, Documents and Pictures automatically, without overwhelming the network.
Few things hurt as much as a stolen laptop holding the only copy of a critical report on its Desktop. OneDrive with Known Folder Move (KFM) solves that almost invisibly: each user's Desktop, Documents and Pictures folders start syncing to the cloud automatically, protecting data with no change of habit. But a poorly planned rollout can choke the network and scare users. Here is how to do it right.
What Known Folder Move is
KFM redirects the three Windows known folders — Desktop, Documents and Pictures — into OneDrive. In practice:
- Files are available on any device the person signs into.
- If the computer fails or is lost, the data is safe in the cloud.
- Version history lets you recover changed or corrupted files.
- Ransomware protection strengthens, with detection and point-in-time restore.
All of this without the user learning anything new. They keep saving to the Desktop as always.
Files On-Demand: saving disk
An essential feature is Files On-Demand. Instead of downloading every file to local disk, OneDrive shows all files as if they were there but only downloads content when a file is opened. That means someone with 200 GB in the cloud can have just a few GB on the SSD.
File states are shown by icons:
- Cloud — available online, occupies almost nothing on disk.
- Available locally — already downloaded.
- Always keep on this device — pinned for guaranteed offline use.
The network challenge
The biggest risk in a KFM rollout is the first bulk upload. If 300 people start syncing tens of GB at once, the office internet link suffers. The solution combines:
- Phased rollout — enable in batches, department by department.
- Bandwidth throttling — policies that control the OneDrive client's upload/download rate.
- Timing — the client can automatically adjust sync speed based on network usage.
Deploying via policy
The professional way to deploy KFM is by policy, not by asking each person to configure it. Using Intune or GPO, you can:
- Silently configure the account — OneDrive signs in with the work account on its own.
- Silently enable KFM — folders are redirected without interaction.
- Block opt-out — prevent the user from undoing the protection.
- Enable Files On-Demand by default.
Recommended roadmap
| Phase | Action |
|---|---|
| 1. Pilot | A small group, validate experience and network impact |
| 2. Communication | Explain what changes (in practice, almost nothing) |
| 3. Initial batch | Departments with less data first |
| 4. Monitoring | Track sync errors and bandwidth usage |
| 5. Expansion | Remaining departments, respecting the network |
| 6. Enforcement | Block opt-out and standardize |
Common pitfalls
- Very large files or long paths can fail to sync — a prior cleanup helps.
- System files or local databases (an Outlook PST, for instance) should not go to OneDrive.
- Name conflicts between existing cloud and local folders need handling.
Key takeaways
- KFM protects Desktop, Documents and Pictures automatically in the cloud.
- Files On-Demand keeps everything accessible without filling the local disk.
- The biggest risk is the first bulk upload — phase the rollout and throttle bandwidth.
- Deploy by policy (Intune/GPO), silently and consistently.
- Pre-clean large files, PSTs and long paths.
RHC deploys OneDrive and KFM as a Microsoft Solutions Partner, planning a phased rollout, Intune policies and data protection with no impact on the user experience.
Frequently asked questions
Read next
Ready to do more with Microsoft?
Talk to an expert and discover how to optimize licensing, security and productivity.