KFM ( Known Folder Move) what you need to know when it fails.

 

KFM ( Known Folder Move) what you need to know when it fails.

 If you have deployed KFM (Known Folder Move) in your environment and user GPO to force it down to user computer , you did enabled at the least below reg keys via your GPO, or add them manually via SCCM or PS script.

 KFM , required and recommended GPO settings

Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\OneDrive
Value Name	KFMBlockOptIn
Value Type	REG_DWORD
Enabled Value	1
Disabled Value	0
KFMSilentOptIn
Tenant ID:
Registry Hive	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\OneDrive
Value Name	KFMSilentOptIn
Value Type	REG_SZ
Default Value
KFMSilentOptInWithNotification
Show notification to users after folders have been redirected:	Enabled
Registry Value	HKEY_LOCAL_MACHINE
Registry Path	SOFTWARE\Policies\Microsoft\OneDrive
Value Name	KFMSilentOptInWithNotification
Value Type	REG_DWORD
Value	0

 

If you found out KFM did not worked one of the most common reason is, existing folder redirection, and OneDrive will add several keys in the registry to prevent KFM run next time, since it has already been failed. You need to fix existing folder redirection issue, whatever is causing it. Then clean up following registry keys to be ready to try again

 

 

 

STEPS	Registry Key Location	Registry Keys
STEP#1	Close OneDrive make sure it is not running
STEP#2	Check existing group policy redirection -fdeploy key	HKLM\Software\Microsoft\WindowsNT\CurrentVersion\ProfileList\ (yoursid)\fdeploy
		PathEffective
STEP#3	Reset the state of KFM deployment, remove all KFM keys in the following registry location	HKCU\SOFTWARE\Microsoft\OneDrive\Accounts\Business1
	Some examples are
		Delete Keys:
		KfmAcmAdminMessageState
		KfmHasForceShownWindow
		KfmIsDoneSilentOptIn
		KfmSilentAttemptedFolders
STEP#4
	Additionally you need to remove following key	HKCU\SOFTWARE\Microsoft\OneDrive\
	Delete Key	KfmFolderNotSyncingMessageHandled
STEP#5	Close OneDrive and try. and make sure all keys for the deployment does exist
STEP#5	GPO Basic KFM reg keys	# KFMBlockOptIn
	these keys later on)	# KFMSilentOptIn
	$registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\OneDrive"	# KFMSilentOptInWithNotification
		# KFMOptInWithWizard ( recommended by MS )

 

 

Azure Solutions Architect
AWS Certified Cloud Practitioner
Azure Certified Security Engineer Associate
https://simplepowershell.blogspot.com
https://cloudsec365.blogspot.com
https://msazure365.blogspot.com
https://twitter.com/Message_Talk