Every organisation today depends on digital files e.g documents, spreadsheets, presentations, videos. Losing them due to laptop theft, damage, or ransomware can paralyse a team. Microsoft 365 gives every user 1TB of OneDrive for Business storage. When set up correctly, OneDrive acts as a built-in disaster recovery tool:

• Files auto-sync from Desktop, Documents, and Pictures.
• Laptop lost or broken? Sign in on another device and continue where you left off.
• Version history restores older file versions.
• Central compliance with retention policies for audits and regulations.

That’s why every IT department should enforce OneDrive backup for all staff.

How IT Can Enforce OneDrive Backup with Intune

Follow these steps in Microsoft Endpoint Manager (Intune) to push backup policies to all company devices.

Step 1: Go to Configuration

From the Intune dashboard: https://intune.microsoft.com/

• Navigate to Devices → Windows → Configuration.
• Click + Create → New Policy.

Step 2: Create a Profile

Platform: Windows 10 and later.

Profile type: Settings catalog.

Click Create.

Name: OneDrive Settings for Windows.
Description: OneDrive backup and compliance for PCs.
Platform auto-set to Windows.
Click Next.

Step 3: Configure OneDrive Settings

Search for OneDrive in the settings catalog and enable these recommended policies:

1. Silently sign in users to the OneDrive sync client with Windows credentials.
2. Silently move Windows known folders to OneDrive.
   (Desktop, Documents, Pictures auto-redirect to OneDrive.)
3. Prevent users from redirecting known folders back to PC.
4. Prompt users when silent move fails.
5. Block syncing of personal OneDrive accounts.
6. Use Files On-Demand (saves disk space by storing files in the cloud until opened).
7. Always start OneDrive automatically.
8. Limit upload/download bandwidth (optional for network control).
9. Exclude specific file types (e.g., *.pst).
10. Auto-mount SharePoint libraries for Teams/Departments.
11. Enable sync health reporting for admin monitoring.
12. Continue syncing on battery saver or metered network.
13. Disable setup tutorials and animations for faster rollout.
14. Restrict syncing to allowed tenant IDs only.
15. Define default OneDrive folder location.
16. Configure storage sense to clean unused OneDrive content.

Step 4: Assign the Policy

Click Next, then Create.

Choose the user group or all users.

Apply scope tags if needed.

Once deployed:

• Every employee’s Desktop, Documents, and Pictures will back up to OneDrive automatically.
• Files will follow the user, not the device.
• IT has full compliance visibility through Intune and the OneDrive Admin Center.

Disaster Recovery in Action

If a staff laptop is stolen or damaged:

1. Hand them a new Windows device.
2. Ask them to sign in with their Microsoft 365 account.
3. OneDrive restores all their files, including the most recent version of the last document they worked on.

No downtime. No data loss.