1. The presentation covered the design, development, deployment, and management of OneDrive for Business including setting up groups in Azure AD, assigning licenses, configuring permissions, and deploying the sync client. 2. Key aspects of the implementation include tenant design, license design, desktop design, setting up MySites, verifying user licenses and profiles, and folder redirection. 3. Ongoing management involves updating the sync client, following OneDrive release updates, and using release rings to control updates.

1. Click to edit Master text styles
LEVEL 100
NOV
24 SharePoint Saturday Toronto #SPSToronto
Isha Kapoor
Office 365 Consultant
#OneDrive #bestpractice #policies
OneDrive for Business Complete
Implementation and Rollout
Learn about Group-based Licensing, Folder Redirection Strategy,
Deployment, Permissions and overall Implementation and rollout of
OneDrive for Business for a mid-size enterprise

2. Click to edit Master text styles
Isha Kapoor
Microsoft MVP
SharePoint and
Office Services
(2012 – 2018)
Office 365 and SharePoint
Consultant, Trainer.
Twitter : @Learningsp

3. Click to edit Master text stylesGOLD
Thank You Sponsors!
BRONZESILVER

4. Click to edit Master text styles
4
SharePint
SharePint
The Drake & Firkin
6982 Financial Dr, Mississauga, ON L5N 8J4

5. Click to edit Master text styles
Why deploy
OneDrive for
Business in your
Organization?
• Folder re-direction support.
 Users can continue using the folders they're familiar with.
 Saving files to OneDrive folders backs up your users' data.
• Share Files via a link to users Inside or Outside your
organization.
• Backup your OneDrive data in real-time.
• Access files from Anywhere using Any device.
• Access Version History for any document in OneDrive.
• Work on a document together with co-authoring.
• Share via email with modern attachments.
• OneDrive Files Restore.

6. Click to edit Master text styles
OneDrive
for Business
Implementation
Design
1
Develop
2
Deploy
3
Operate
4

7. Click to edit Master text styles
Life Cycle - Management
Design
• Tenant Design – Sharing,
Sync Restrictions, Storage .
• License Design - Group
based with Azure Basic or
Premium License.
• Desktop Design – O365
Sync client, GPO Policies.
1
Develop
• Setup Groups in Azure.
• Assign groups with E3E5
License.
• Setup permissions to
Control who can create My
Sites.
2
Deploy
• Assign User License via
group.
• Install Sync Client via
SCCM or Kace.
• Sync Files, GPO for Folder
Redirection & Data
Migration.
3
Operate
•Update Sync client version.
•Follow OneDrive Updates
for Critical Bugs and
Changes.
4

8. Click to edit Master text styles
Tenant Design
• Setup Mysite.
• Setup Secondary
Administrators.
• Sharing, Sync
Restrictions.
• Safe Domains.
• Notifications.
License Design
• Purchase Azure
BasicAD Premium
for Group based
Licensing.
• Create O365
Security group in
Active Directory.
Desktop
Design
• Deploy SYNC Client
with SCCM.
• Deploy GPO Policies
Enable enterprise
update.
Prevent users personal
drive.
Set Default OneDrive
SYNC Location.
Design – OneDrive for Business

9. Click to edit Master text styles
SharePoint Online and OneDrive for Business are
closely integrated Office 365 services.
Like on SharePoint on-prem, a MY Site Host Web
app in Office 365 is typically created and hosted in
SharePoint Online as : https://tanentname-
my.sharepoint.com/
Design - Setup MySites
The My Site settings are configured during initial creation of your SharePoint
Online MY Site Host web app.

10. Click to edit Master text styles
• Sync Security group example, Corp_Users_Onedrive to Azure AD.
• Assign Security group with E3 and Azure Basic or Premium License.
Azure AD Group
• Control who can create My SitesOneDrive for Business sites from
User Profiles -> Manage User Permissions.
SharePoint Online Permissions
Develop – OneDrive for Business

11. Click to edit Master text styles
Develop – Setup Azure AD Group with E3 License
1
2

12. Click to edit Master text styles
Develop – Setup Azure AD Group with E3 License
3
4

13. Click to edit Master text styles
Develop – Restrict Personal Site Creation to Azure AD Group
1
2
3

14. Click to edit Master text styles
Deployment – User License
Verification
• Verification is required to
ensure that the SPO service
is enabled for the licensed
user.
• OneDrive for Business site
provisions begins after that.

15. Click to edit Master text styles
Deployment – Service Verification
Communication
• A Communication package
will be sent to the users with
a directive on how to sign-up
for a SYNC client..
• OneDrive for Business site
should be ready to use at
this time.
• Run a script to verify
“SharePoint Online”
service status using
PowerShell.
• Alternately, Verify service
enabled from Azure UI.
• Run a script to verify that
user’s OneDrive has
provisioned successfully.
• Alternately, Verify the
OneDrive URL from Office
365 admin center -> users.
• Verify the user profile has
been created in the User
Profile service (UPS) in
SharePoint Online.

16. Click to edit Master text styles
Verify User Profile
Creation on the SPO
site
• Users, when onboarded and
enabled with SharePoint Online
service gets a profile created for
them in SharePoint Online User
profiles.
• User Profile in SPO has
information synced from Azure
AD.
• Once the new user shows up
under Profiles, you are all set;
License wise!

17. Click to edit Master text styles
Deployment – SYNC Client
• OneDrive Sync client will be deployed
to newly on-boarded users’ machine
using Kace or SCCM.
• Users would need to search for
OneDrive and then Login with their
email address and select the Folders
to sync.

18. Click to edit Master text styles
SYNC Client - Desktop Design
User Configuration Policies, set the following with Environment variable :
• Folder Redirection
o Contacts
o Desktop
o Documents
o Favorites
o Links
o Music
o Pictures
o Searches
o Videos
• Set GPO Policies for :
 Prevent users from synchronizing personal OneDrive accounts .
 Delay Updating OneDrive.exe until second release wave (Enterprise update).
 Restrict users to use C:UsersUsernameOneDrive – Tridel Location.
 Restrict default Location.
Reference to set all policies
The following Windows and User Configuration Policies can be configured.

19. Click to edit Master text styles
Folder Redirection
When users sign in for the first
time, Group Policy will detect if
the OneDrive folder exists under
C:usersusernameOneDrive. If
the folder exists, all Windows
folders - Contacts, Desktop,
Documents, Favorites, Links,
Music, Pictures, Searches will be
redirected to the OneDrive
folder.
Once the Documents folder has
been redirected, shortcuts to
Windows Folders - such as those
in File Explorer will point to the
new location. Registry entries
for GPO policies will be
deployed as a part of gpupdate.

20. Click to edit Master text styles
OneDrive Operate – Release Management
The first ring, "Production," is the default. It typically takes one to two weeks to
completely roll out to this ring.
Microsoft finishes rolling out to the Production ring, they release to the second
ring, "Enterprise.“ You have 60 days to pause the rollout with this ring.
OneDrive.exe Update Rings - Microsoft releases updates to OneDrive.exe in two rings.
1
2

21. Click to edit Master text styles
Follow us :
Twitter : @Learningsp
Facebook :
www.facebook.com/learning.sha
repoint.page
Website :
www.LearningSharePoint.com