1. Deploy the new OneDrive sync client a practical guide
Microsoft Ignite 2016
7/22/2018 7:57 AM
BRK3081
Deploy the new OneDrive sync client a practical guide
Tony East & Patricia Hendricks
OneDrive PM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

2. Overview Microsoft Ignite 2016 7/22/2018 7:57 AM
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

3. Sync Unlocks OneDrive and SharePoint Value
Microsoft Ignite 2016
7/22/2018 7:57 AM
Sync Unlocks OneDrive and SharePoint Value
Productivity still primarily on PC’s
Sync gets files “off” PC’s & shares & fulfills promise of the cloud
Doesn’t require user behavior change
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

4. Three phases of deployment
Microsoft Ignite 2016
7/22/2018 7:57 AM
Three phases of deployment
Prep for rollout
Installing OneDrive
Monitor initial sync
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

5. 7/22/2018 7:57 AM
Prep for rollout
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

6. Understanding your company’s file ecosystem
Think about your users’ habits
Where do your users work every day?
Where do they put their files?
Do your users already have files in OneDrive?
Think about content generation across your company
Where are the bulk of the files being generated today?
Do you have GBs, TBs of content already?

7. Sync Network Utilization Pattern
Load
Initial Sync
Operation & Organic Usage Growth
Time

8. Let’s learn how OneDrive installs
7/22/2018 7:57 AM
Let’s learn how OneDrive installs
Patricia Hendricks
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

9. What to know before you deploy
TechReady 23
7/22/2018 7:57 AM
What to know before you deploy
The OneDrive client already comes installed with all Win10 devices!
OneDriveSetup.exe is included in all Office2016 builds
OneDrive is deployed as an .exe, not an MSI
But wait, my organization deploys MSIs, not .exes!
Don’t worry, we’ll show you how.
OneDriveSetup.exe must run with elevation
This is so we can access the local machine registry and install icon overlays.
OneDriveSetup.exe installs only on the current logged on user
That’s a pain. Why can’t we install once per machine?
OneDrive is installed under a user’s %localappdata%\Microsoft folder, not C:\Program files. Installing per user lets the OneDrive client seamlessly receive updates without requiring elevation. This ensure users have the highest quality builds and access to new features. We’ll show you how you can install per user with SCCM.
OneDrive.exe must run in the user context
OneDrive.exe runs in the context of the user in which is was invoked. If OneDrive.exe is launched with elevation, Windows is going going to run as if it were the admin. Which is a problem if the current user isn’t the admin!
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

10. TechReady 23
7/22/2018 7:57 AM
Here’s a real example
Let’s see how we can use SCCM to deploy the OneDrive sync client
For a detailed walkthrough, check out this great blog post by Paulo Dias
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

11. Step 1: Create a script based application
TechReady 23
7/22/2018 7:57 AM
Step 1: Create a script based application
Manually specify the application information
Create a new application and select “Manually specify the application information.” After giving your application a cool name, select “Manually specify your deployment type information” and select “Script Installer” as your deployment type.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

12. Step 2: Set your install and uninstall programs
TechReady 23
7/22/2018 7:57 AM
Step 2: Set your install and uninstall programs
Download the latest OneDriveSetup.exe.
Save it to an accessible content location.
Note: if you’ve installed Office 2016, you will already find OneDriveSetup.exe under C:\Program Files (x86)
Set your install and uninstall programs
Set your install program to “OneDriveSetup.exe /silent”
Set your uninstall program to “OneDriveSetup.exe /uninstall”
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

13. Why use /silent? Without /silent With /silent TechReady 23
7/22/2018 7:57 AM
Why use /silent?
Without /silent
Users are shown installation UI
And launched directly into the OneDrive Setup Wizard on completion
With /silent
No installation UI
You control of when you want to show the OneDrive setup wizard to your users. We’ll show you how.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

14. Step 3: Adding your OneDrive detection logic
TechReady 23
7/22/2018 7:57 AM
Step 3: Adding your OneDrive detection logic
Wait, what is this step for?
In the next step, you’ll see that we’ll set the deployment to run on user logon. By logon, this means every user logon. In this step, we add a script that 1) checks whether OneDrive is already installed for that current user, and 2) launches the deployment only for users who don’t have OneDrive installed.
Use the instructions from to sign and copy/paste the custom detection logic your Configuration Manager console.
Credit to PowerShell guru Herbert Fuchs for the detection logic.
Why is this step important?
This step prevents multiple installs of OneDriveSetup.exe. While not harmful, this multiple installs result in multiple version folders under %localappdata%\Microsoft\OneDrive. To maintain good file system hygiene, we recommend adding this detection logic.
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

15. Step 4: Important! Set the logon requirement
TechReady 23
7/22/2018 7:57 AM
Step 4: Important! Set the logon requirement
Install for System
Installing for system provides the elevation needed for OneDriveSetup.exe to access HKLM.
Only when user is logged on
Installing only when a user is logged on provides a target user for install. Without it a logged on user, OneDriveSetup.exe will add itself to C:\Program Files, but will not install under %localappdata%\ of the current user.
Allow user to view and interact with program installation
Super important. This impersonates the current user. Without it, OneDrive again will only install for system under C:\Program Files, but not the logged on user.
This is important
…but this is most important
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

16. TechReady 23
7/22/2018 7:57 AM
Bonus
We’ve created an application package for you to import directly into SCCM
Grab it at
Reference: by Paulo Dias
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

17. Prepping the desktop Patricia Hendricks 7/22/2018 7:57 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

18. Ramping your deployment
Start small
Find your groove ;)

19. Mac Standalone Package
7/22/2018 7:57 AM
Mac Standalone Package
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

20. OneDrive sync client Mac Standalone
Features
Deployable package with all languages included
Automatic updater (invisible to user)
Creates Finder Shortcuts to your synced folders
Automatically turns on Finder extension for sync status overlays
Open at login enabled by default
Configurable Options
Run at login
Disable personal accounts
Set default folder location and/or disable change location
Hide dock icon
Coming soon: Automatic upload bandwidth allocation

21. Deploying OneDrive on Mac
Microsoft Ignite 2016
7/22/2018 7:57 AM
Deploying OneDrive on Mac
Tony East
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

22. Securing Your Deployment
7/22/2018 7:57 AM
Securing Your Deployment
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

23. Controlling access to data
Microsoft Ignite 2016
7/22/2018 7:57 AM
Controlling access to data
User
Group memberships
Auth strength (MFA)
Risky behavior
Device
Managed
Compliant
App
Mobile App is managed
Mobile App reputation
SaaS app sensitivity
Conditional access with EMS
Other
Network location
Breach detected
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

24. Conditional Access (CA)
TechReady 23
7/22/2018 7:57 AM
Conditional Access (CA)
Built on AAD “ADAL” Auth Stack
Ensures machine policy compliance before establishing the sync relationship
i.e. “Require Domain Join”
Policies enforced at account configuration time
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

25. OneDrive & Windows Information Protection
Integrated with the Windows 10 WIP platform
Enables users to safely sync “corporate” and “personal” data on a single device
IT can monitor, warn or block
Helps prevent accidental data leakage
The OneDrive sync client is “enlightened”
Enterprise data is encrypted and protected from accidental exposure
Should give IT more comfort allowing personal/work mix on machine
You can start using it today with Windows 10 AU
Universal Office supports it (U Outlook/W/X/P/OneNote) already in the store and coming soon for Windows desktop apps
IT decides if user can change ownership
Right-click allows user to change ownership

26. Conditional Access & WIP
Tony East

27. A word on automatic updates…
Microsoft Ignite 2016
7/22/2018 7:57 AM
A word on automatic updates…
The OneDrive sync client automatically updates itself
This ensure you always have the latest bug fixes and most reliable builds!
What if my organization isn’t ready for the latest features?
Client updates don’t always imply availability of the latest features.
You control when your organization enables large, disruptive features!
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

28. 7/22/2018 7:57 AM
Wrap Up
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

29. Deployment & Operational Tools
Microsoft Ignite 2016
7/22/2018 7:57 AM
The Journey
OneDrive everywhere with your user’s Documents, Pictures and Desktop in sync
OneDrive Sync
Team Sites Sync
Document Redirection
Unattended Setup
Deployment & Operational Tools
© 2016 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

30. File access and sharing sessions at Ignite
Tuesday
BRK2118 – Explore OneDrive for Business key features and roadmap
BRK1011 – Drive productivity with OneDrive and SharePoint file collaboration
BRK2119 – Understand the sync and desktop integration options for OneDrive and SharePoint
Thursday
BRK1010 – Explore the mobile options for OneDrive for Business and SharePoint files
Wednesday
BRK3081 – Deploy the new OneDrive sync client—a practical guide
BRK3228 – Protect your OneDrive and SharePoint files on mobile devices
Friday
BRK3082 – Build solutions and apps with Microsoft OneDrive API and Microsoft Graph API

31. Q&A

32. Deploy, ramp-up on new services and onboard new users with Microsoft FastTrack:

33. Join the Microsoft Tech Community to collaborate, share, and learn from the experts:

34. Please evaluate this session
7/22/2018 7:57 AM
Please evaluate this session
Your feedback is important to us!
From your PC or Tablet visit MyIgnite at
From your phone download and use the Ignite Mobile App by scanning the QR code above or visiting
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.

35. 7/22/2018 7:57 AM
© 2014 Microsoft Corporation. All rights reserved. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.