win: improve OneDrive data deletion safety
This commit improves the safety mechanisms in the script for deleting OneDrive user data on Windows. Key changes: - System Integrity Protection: The script now checks if user shell folders point to the OneDrive directory. If they do, it halts the deletion and provides guidance to the user. This ensures system stability is not compromised. - Data Loss Prevention: The script will no longer delete files or non-empty folders. This precaution helps to avoid unintended data loss. Other supporting changes: - This script now covers OneDrive folders for multi-account users. - Separation of concerns: The 'Remove OneDrive residual files' script is is divided into two distinct scripts for better maintainability and documentation clarity: 1. 'Remove OneDrive user data and synced folders' 2. 'Remove OneDrive installation files and cache' - Fix an issue with the Windows 11 check in the 'Disable automatic OneDrive installation' revert script. - Update related documentation with archived URLs for reliability. - Fix indentation of OneDrive removal scripts.
This commit is contained in:
undergroundwires
@@ -14212,361 +14212,480 @@ actions:
|
|||||||
packageName: Windows.PrintDialog # Get-AppxPackage Windows.PrintDialog
|
packageName: Windows.PrintDialog # Get-AppxPackage Windows.PrintDialog
|
||||||
publisherId: cw5n1h2txyewy
|
publisherId: cw5n1h2txyewy
|
||||||
-
|
-
|
||||||
category: Remove OneDrive
|
category: Remove OneDrive
|
||||||
docs: |-
|
docs: |-
|
||||||
Microsoft OneDrive (formerly SkyDrive) is a file hosting service operated by Microsoft [1].
|
Microsoft OneDrive (formerly SkyDrive) is a file hosting service operated by Microsoft [1].
|
||||||
First launched in August 2007, it enables registered users to share and synchronize their files [1].
|
First launched in August 2007, it enables registered users to share and synchronize their files [1].
|
||||||
|
|
||||||
Data stored on OneDrive is subject to monitoring by Microsoft [2].
|
Data stored on OneDrive is subject to monitoring by Microsoft [2].
|
||||||
There's been reports of Microsoft accessing and altering your personal files when syncing on OneDrive [3] [4].
|
There's been reports of Microsoft accessing and altering your personal files when syncing on OneDrive [3] [4].
|
||||||
|
|
||||||
Uninstalling OneDrive is recommended by Microsoft to optimize Windows VDIs [5].
|
Uninstalling OneDrive is recommended by Microsoft to optimize Windows VDIs [5].
|
||||||
|
|
||||||
[1]: https://en.wikipedia.org/wiki/OneDrive "OneDrive | Wikipedia"
|
[1]: https://en.wikipedia.org/wiki/OneDrive "OneDrive | Wikipedia"
|
||||||
[2]: https://en.wikipedia.org/w/index.php?title=OneDrive&oldid=1111615560#Privacy_concerns "OneDrive | Privacy concerns | Wikipedia"
|
[2]: https://en.wikipedia.org/w/index.php?title=OneDrive&oldid=1111615560#Privacy_concerns "OneDrive | Privacy concerns | Wikipedia"
|
||||||
[3]: https://web.archive.org/web/20191002180755/https://www.intralinks.com/blog/2014/04/microsoft-onedrive-business-can-alter-files-syncs "Microsoft OneDrive for Business can Alter Your Files as It Syncs | Intralinks"
|
[3]: https://web.archive.org/web/20191002180755/https://www.intralinks.com/blog/2014/04/microsoft-onedrive-business-can-alter-files-syncs "Microsoft OneDrive for Business can Alter Your Files as It Syncs | Intralinks"
|
||||||
[4]: https://thehackernews.com/2014/04/microsoft-onedrive-secretly-modifies.html "Microsoft OneDrive Secretly Modifies your BackUp Files | thehackernews.com"
|
[4]: https://thehackernews.com/2014/04/microsoft-onedrive-secretly-modifies.html "Microsoft OneDrive Secretly Modifies your BackUp Files | thehackernews.com"
|
||||||
[5]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
[5]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
||||||
children:
|
children:
|
||||||
-
|
-
|
||||||
name: Kill OneDrive process
|
name: Kill OneDrive process
|
||||||
recommend: strict
|
recommend: strict
|
||||||
docs: |-
|
docs: |-
|
||||||
It stops the execution of OneDrive.
|
It stops the execution of OneDrive.
|
||||||
Main OneDrive process is `OneDrive.exe` and it is installed in `<local-app-data>\Microsoft\OneDrive\OneDrive.exe` [1] [2] [3] [4].
|
Main OneDrive process is `OneDrive.exe` and it is installed in `<local-app-data>\Microsoft\OneDrive\OneDrive.exe` [1] [2] [3] [4].
|
||||||
|
|
||||||
[1]: https://answers.microsoft.com/en-us/windows/forum/all/onedrive-wont-sync-and-wont-uninstall-so-i-can-re/6182d0a5-e7ea-46bb-a058-c0a4fd5e299a "Onedrive wont sync and wont uninstall so I can re-install the latest - Microsoft Community | answers.microsoft.com"
|
[1]: https://answers.microsoft.com/en-us/windows/forum/all/onedrive-wont-sync-and-wont-uninstall-so-i-can-re/6182d0a5-e7ea-46bb-a058-c0a4fd5e299a "Onedrive wont sync and wont uninstall so I can re-install the latest - Microsoft Community | answers.microsoft.com"
|
||||||
[2]: https://social.technet.microsoft.com/Forums/scriptcenter/en-US/9bd33f03-62dd-4c4f-9d29-970c1016f2f9/better-onedrive-detection-method?forum=configmanagerapps "Better OneDrive detection method | social.technet.microsoft.com"
|
[2]: https://social.technet.microsoft.com/Forums/scriptcenter/en-US/9bd33f03-62dd-4c4f-9d29-970c1016f2f9/better-onedrive-detection-method?forum=configmanagerapps "Better OneDrive detection method | social.technet.microsoft.com"
|
||||||
[3]: https://social.msdn.microsoft.com/Forums/en-US/072e3577-d0ff-4950-9e0b-40b037853881/starting-and-stopping-sharepoint-library-sync-with-onedrive?forum=sharepointdevelopmentprevious "Starting and stopping SharePoint library sync with OneDrive | social.msdn.microsoft.com"
|
[3]: https://social.msdn.microsoft.com/Forums/en-US/072e3577-d0ff-4950-9e0b-40b037853881/starting-and-stopping-sharepoint-library-sync-with-onedrive?forum=sharepointdevelopmentprevious "Starting and stopping SharePoint library sync with OneDrive | social.msdn.microsoft.com"
|
||||||
[4]: https://learn.microsoft.com/en-us/answers/questions/473995/onedrive-was-previously-disabled-and-now-i-can39t.html "OneDrive was previously disabled and now I can't enable it with GPO - Microsoft Q&A | learn.microsoft.com"
|
[4]: https://learn.microsoft.com/en-us/answers/questions/473995/onedrive-was-previously-disabled-and-now-i-can39t.html "OneDrive was previously disabled and now I can't enable it with GPO - Microsoft Q&A | learn.microsoft.com"
|
||||||
call:
|
call:
|
||||||
function: TerminateRunningProcess
|
function: TerminateRunningProcess
|
||||||
parameters:
|
parameters:
|
||||||
executableNameWithExtension: OneDrive.exe
|
executableNameWithExtension: OneDrive.exe
|
||||||
revertExecutablePath: '%LOCALAPPDATA%\Microsoft\OneDrive\OneDrive.exe'
|
revertExecutablePath: '%LOCALAPPDATA%\Microsoft\OneDrive\OneDrive.exe'
|
||||||
revertExecutableArgs: /background
|
revertExecutableArgs: /background
|
||||||
-
|
-
|
||||||
name: Remove OneDrive from startup
|
name: Remove OneDrive from startup
|
||||||
recommend: strict
|
recommend: strict
|
||||||
docs: |-
|
docs: |-
|
||||||
OneDrive starts on every boot in both Windows 10 and 11.
|
OneDrive starts on every boot in both Windows 10 and 11.
|
||||||
It's started through `OneDrive` `REG_SZ` entry in `HKCU\Software\Microsoft\Windows\CurrentVersion\Run` [1].
|
It's started through `OneDrive` `REG_SZ` entry in `HKCU\Software\Microsoft\Windows\CurrentVersion\Run` [1].
|
||||||
The startup command is `"<local-app-data>\Microsoft\OneDrive\OneDrive.exe" /background` [1].
|
The startup command is `"<local-app-data>\Microsoft\OneDrive\OneDrive.exe" /background` [1].
|
||||||
|
|
||||||
[1]: https://techcommunity.microsoft.com/t5/azure-virtual-desktop/start-onedrive-when-using-a-remoteapp-in-wvd/m-p/899331 "Re: Start OneDrive when using a RemoteApp in WVD - Page 2 - Microsoft Tech Community | techcommunity.microsoft.com"
|
[1]: https://techcommunity.microsoft.com/t5/azure-virtual-desktop/start-onedrive-when-using-a-remoteapp-in-wvd/m-p/899331 "Re: Start OneDrive when using a RemoteApp in WVD - Page 2 - Microsoft Tech Community | techcommunity.microsoft.com"
|
||||||
code: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f 2>nul
|
code: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f 2>nul
|
||||||
revertCode: reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /t REG_SZ /d "\"%LOCALAPPDATA%\Microsoft\OneDrive\OneDrive.exe\" /background" /f
|
revertCode: reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /t REG_SZ /d "\"%LOCALAPPDATA%\Microsoft\OneDrive\OneDrive.exe\" /background" /f
|
||||||
-
|
-
|
||||||
name: Remove OneDrive through official installer
|
name: Remove OneDrive through official installer
|
||||||
docs: |-
|
docs: |-
|
||||||
This script will call official Microsoft uninstaller that will uninstall the application but residual files will be left.
|
This script will call official Microsoft uninstaller that will uninstall the application but residual files will be left.
|
||||||
You won't lose data by uninstalling OneDrive from computer because they will be stored in cloud [1].
|
You won't lose data by uninstalling OneDrive from computer because they will be stored in cloud [1].
|
||||||
|
|
||||||
Running OneDrive client setup package (`OneDriveSetup.exe`) with the `/uninstall` command line switch uninstalls OneDrive [2] [3].
|
Running OneDrive client setup package (`OneDriveSetup.exe`) with the `/uninstall` command line switch uninstalls OneDrive [2] [3].
|
||||||
On Windows 10, the setup package is found on different folders (`System32` or `SysWOW64`) based on the CPU architecture [4].
|
On Windows 10, the setup package is found on different folders (`System32` or `SysWOW64`) based on the CPU architecture [4].
|
||||||
On Windows 11, the setup package is always inside `System32` regarding of the CPU architecture.
|
On Windows 11, the setup package is always inside `System32` regarding of the CPU architecture.
|
||||||
|
|
||||||
Uninstalling OneDrive is recommended by Microsoft to optimize Windows VDIs [5].
|
Uninstalling OneDrive is recommended by Microsoft to optimize Windows VDIs [5].
|
||||||
|
|
||||||
[1]: https://support.microsoft.com/en-us/office/turn-off-disable-or-uninstall-onedrive-f32a17ce-3336-40fe-9c38-6efb09f944b0 "Turn off, disable, or uninstall OneDrive | support.microsoft.com"
|
[1]: https://support.microsoft.com/en-us/office/turn-off-disable-or-uninstall-onedrive-f32a17ce-3336-40fe-9c38-6efb09f944b0 "Turn off, disable, or uninstall OneDrive | support.microsoft.com"
|
||||||
[2]: https://web.archive.org/web/20231002162805/https://learn.microsoft.com/en-us/sharepoint/troubleshoot/installation-and-setup/how-to-block-onedrive-from-being-advertised-after-install-office-2016#method-2-uninstall-onedriveexe "How to block OneDrive.exe from being advertised after you install Office 2016 - SharePoint | Microsoft Learn"
|
[2]: https://web.archive.org/web/20231002162805/https://learn.microsoft.com/en-us/sharepoint/troubleshoot/installation-and-setup/how-to-block-onedrive-from-being-advertised-after-install-office-2016#method-2-uninstall-onedriveexe "How to block OneDrive.exe from being advertised after you install Office 2016 - SharePoint | Microsoft Learn"
|
||||||
[3]: https://learn.microsoft.com/en-us/sharepoint/troubleshoot/lists-and-libraries/cannot-open-onedrive-on-images-using-sysprep#how-to-correctly-deploy-onedrive-via-sysprep "Can't open OneDrive on images using Sysprep - SharePoint | Microsoft Learn"
|
[3]: https://learn.microsoft.com/en-us/sharepoint/troubleshoot/lists-and-libraries/cannot-open-onedrive-on-images-using-sysprep#how-to-correctly-deploy-onedrive-via-sysprep "Can't open OneDrive on images using Sysprep - SharePoint | Microsoft Learn"
|
||||||
[4]: https://answers.microsoft.com/en-us/windows/forum/all/onedrive-on-windows-11-does-not-appear-in-file/250c679b-9d02-410f-8c8f-41cca112ccfa "OneDrive on Windows 11 - Does Not Appear in File Explorer - Microsoft Community | answers.microsoft.com"
|
[4]: https://answers.microsoft.com/en-us/windows/forum/all/onedrive-on-windows-11-does-not-appear-in-file/250c679b-9d02-410f-8c8f-41cca112ccfa "OneDrive on Windows 11 - Does Not Appear in File Explorer - Microsoft Community | answers.microsoft.com"
|
||||||
[5]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
[5]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
||||||
recommend: strict
|
recommend: strict
|
||||||
code: |-
|
code: |-
|
||||||
if exist "%SYSTEMROOT%\System32\OneDriveSetup.exe" (
|
if exist "%SYSTEMROOT%\System32\OneDriveSetup.exe" (
|
||||||
"%SYSTEMROOT%\System32\OneDriveSetup.exe" /uninstall
|
"%SYSTEMROOT%\System32\OneDriveSetup.exe" /uninstall
|
||||||
) else (
|
|
||||||
if exist "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" (
|
|
||||||
"%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" /uninstall
|
|
||||||
) else (
|
) else (
|
||||||
echo Failed to uninstall, uninstaller could not be found. 1>&2
|
if exist "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" (
|
||||||
|
"%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" /uninstall
|
||||||
|
) else (
|
||||||
|
echo Failed to uninstall, uninstaller could not be found. 1>&2
|
||||||
|
)
|
||||||
)
|
)
|
||||||
)
|
revertCode: |-
|
||||||
revertCode: |-
|
if exist "%SYSTEMROOT%\System32\OneDriveSetup.exe" (
|
||||||
if exist "%SYSTEMROOT%\System32\OneDriveSetup.exe" (
|
"%SYSTEMROOT%\System32\OneDriveSetup.exe" /silent
|
||||||
"%SYSTEMROOT%\System32\OneDriveSetup.exe" /silent
|
|
||||||
) else (
|
|
||||||
if exist "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" (
|
|
||||||
"%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" /silent
|
|
||||||
) else (
|
) else (
|
||||||
echo Failed to install, installer could not be found. 1>&2
|
if exist "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" (
|
||||||
|
"%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" /silent
|
||||||
|
) else (
|
||||||
|
echo Failed to install, installer could not be found. 1>&2
|
||||||
|
)
|
||||||
)
|
)
|
||||||
)
|
-
|
||||||
-
|
name: Remove OneDrive user data and synced folders
|
||||||
name: Remove OneDrive residual files
|
recommend: strict
|
||||||
recommend: strict
|
docs: |-
|
||||||
docs: |-
|
This script deletes the OneDrive directory and all stored data from your profile.
|
||||||
This script cleans OneDrive files such as installation directories, application data,
|
|
||||||
and temporary files and cache.
|
|
||||||
|
|
||||||
- `C:\OneDriveCache`: Temporary cache location [1].
|
OneDrive usually saves your data in the `%USERPROFILE%\OneDrive` directory [1] [2], also known as the *OneDrive folder*
|
||||||
- `C:\ProgramData\Microsoft OneDrive`: Program data, used during setup [2] [3].
|
or *OneDrive root directory* [2].
|
||||||
- `C:\Users\<username>\OneDrive`: OneDrive root directory [4].
|
By default, OneDrive stores user data in folder called *OneDrive* [1].
|
||||||
- `C:\Users\<username>\AppData\Local\Microsoft\OneDrive`: OneDrive installation directory [5].
|
For multiple accounts, files may be in *OneDrive - Personal* or *OneDrive - CompanyName* folders [1] [3].
|
||||||
|
|
||||||
The folders are reported by the community [1]. According to the tests:
|
OneDrive can synchronize default Windows folders like *Documents*, *Pictures*, *Music*, and *Desktop* [4] [5] [6] [7].
|
||||||
|
These folders are known as *user shell folders* [6] or *Windows system folders* [7].
|
||||||
|
Upon synchronization, these folders are moved within the OneDrive user data directory [5] [8].
|
||||||
|
|
||||||
| Directory | Windows 11 (since 22H2) | Windows 10 (since 22H2) |
|
Users may enable this synchronization unknowingly during Windows setup by choosing *Save files to OneDrive* option [9] [10].
|
||||||
| --------- |:-----------------------:|:-----------------------:|
|
Alternatively, synchronization can be enabled later through OneDrive settings [4]. OneDrive
|
||||||
| `%SYSTEMDRIVE%C:\OneDriveCache` | ❌ Missing | ❌ Missing |
|
may also prompt users to *set up protection of important folders* [11], a feature also referred to as *protect your folders* or *Known
|
||||||
| `%PROGRAMDATA%\Microsoft OneDrive` | ✅ Exists | ✅ Exists |
|
Folder Move (KFM)* [11]. Additionally, an organization may move files of their managed computers to OneDrive using methods such as the
|
||||||
| `%LOCALAPPDATA%\Microsoft\OneDrive` | ✅ Exists | ✅ Exists |
|
*Windows Folder Redirection Group Policy* [8].
|
||||||
| `%USERPROFILE%\OneDrive` | ✅ Exists | ✅ Exists |
|
|
||||||
|
|
||||||
[1]: https://social.microsoft.com/Forums/en-US/53263a51-856f-4e64-bc0e-a689d4cc5a8b/release-notes-for-1907-build-29711727413?forum=FSLogix "Release Notes for 1907 - build 2.9.7117.27413 | social.microsoft.com"
|
This script contains safeguards to protect against unintended consequences:
|
||||||
[2]: https://techcommunity.microsoft.com/t5/sharepoint/onedrive-setup-fails-to-complete/m-p/2072446 "OneDrive setup fails to complete - Microsoft Tech Community"
|
|
||||||
[3]: https://answers.microsoft.com/en-us/msoffice/forum/all/why-does-onedrive-act-as-ransomware/288e5940-b92b-493c-91ff-dafd26279bee "Why does OneDrive act as Ransomware? - Microsoft Community"
|
1. **System Integrity Protection**:
|
||||||
[4]: https://techcommunity.microsoft.com/t5/onedrive-for-business/change-onedrive-installation-location/m-p/225064 "Change OneDrive installation location - Microsoft Tech Community | techcommunity.microsoft.com"
|
|
||||||
[5]: https://learn.microsoft.com/en-us/sharepoint/install/configure-syncing-with-the-onedrive-sync-app "Configure syncing with the new OneDrive sync app - SharePoint Server | Microsoft Learn | learn.microsoft.com"
|
The script verifies if any user shell folders are linked to the OneDrive directory.
|
||||||
call:
|
This is crucial as redirecting these folders to OneDrive can cause system integrity issues.
|
||||||
-
|
For instance, if the *Desktop* folder is redirected to OneDrive, deleting the OneDrive folder could make the *Desktop* inaccessible.
|
||||||
|
The script stops and warns if any user shell folders are found within OneDrive.
|
||||||
|
|
||||||
|
> 💡 Move these folders back to their original locations using the
|
||||||
|
> `HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders` registry key [6] before proceeding.
|
||||||
|
|
||||||
|
2. **Data Loss Prevention**:
|
||||||
|
|
||||||
|
The script avoids deleting files or non-empty directories to prevent accidental data loss.
|
||||||
|
|
||||||
|
> 💡 Manually empty these directories before running the script or opt to delete them afterward if needed.
|
||||||
|
|
||||||
|
The OneDrive folder has been confirmed to exist in modern versions of Windows, tested since Windows 11 (since 22H2)
|
||||||
|
and Windows 10 (since 22H2).
|
||||||
|
|
||||||
|
[1]: https://web.archive.org/web/20231025220524/https://support.microsoft.com/en-us/office/sync-onedrive-files-and-folders-3b8246e0-cc3c-4ae7-b4e1-4b4b37d27f68 "Sync OneDrive files and folders - Microsoft Support | support.microsoft.com"
|
||||||
|
[2]: https://web.archive.org/web/20220812205500/https://admx.help/?Category=OneDrive&Policy=Microsoft.Policies.OneDriveNGSC::DefaultRootDir "Set the default location for the OneDrive folder | admx.help"
|
||||||
|
[3]: https://web.archive.org/web/20231025220530/https://support.microsoft.com/en-us/office/sync-files-with-onedrive-in-windows-615391c4-2bd3-4aae-a42a-858262e42a49 "Sync files with OneDrive in Windows | support.microsoft.com"
|
||||||
|
[4]: https://web.archive.org/web/20231025220541/https://support.microsoft.com/en-us/office/choose-which-onedrive-folders-to-sync-to-your-computer-98b8b011-8b94-419b-aa95-a14ff2415e85 "Choose which OneDrive folders to sync to your computer - Microsoft Support | support.microsoft.com"
|
||||||
|
[5]: https://web.archive.org/web/20240317200014/https://support.microsoft.com/en-us/office/back-up-your-folders-with-onedrive-d61a7930-a6fb-4b95-b28a-6552e77c3057 "Back up your folders with OneDrive - Microsoft Support | support.microsoft.com"
|
||||||
|
[6]: https://web.archive.org/web/20231025220843/https://support.microsoft.com/en-us/topic/how-to-redirect-user-shell-folders-to-a-specified-path-by-using-profile-maker-ed6289ae-1f9c-b874-4e8c-20d23ea65b2e "How to redirect user shell folders to a specified path by using Profile Maker - Microsoft Support | support.microsoft.com"
|
||||||
|
[7]: https://web.archive.org/web/20231025220733/https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/controlled-folders?view=o365-worldwide#windows-system-folders-are-protected-by-default "Protect important folders from ransomware from encrypting your files with controlled folder access | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[8]: https://web.archive.org/web/20231025220852/https://learn.microsoft.com/en-us/sharepoint/redirect-known-folders "Redirect and move Windows known folders to OneDrive - SharePoint in Microsoft 365 | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[9]: https://web.archive.org/web/20231025220728/https://learn.microsoft.com/en-us/windows-hardware/customize/desktop/customize-oobe-in-windows-11 "Customize the Out of Box experience (OOBE) | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[10]: https://web.archive.org/web/20231025220741/https://learn.microsoft.com/en-us/windows-hardware/customize/desktop/customize-oobe "Customize OOBE | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[11]: https://web.archive.org/web/20231025220711/https://techcommunity.microsoft.com/t5/microsoft-onedrive-blog/migrate-your-files-to-onedrive-easily-with-known-folder-move/ba-p/207076 "Migrate Your Files to OneDrive Easily with Known Folder Move - Microsoft Community Hub | techcommunity.microsoft.com"
|
||||||
|
call:
|
||||||
function: DeleteDirectory
|
function: DeleteDirectory
|
||||||
parameters:
|
parameters:
|
||||||
directoryGlob: '%USERPROFILE%\OneDrive'
|
directoryGlob: '%USERPROFILE%\OneDrive*'
|
||||||
-
|
# System Integrity Guard: Verifying user shell folders
|
||||||
function: DeleteDirectory
|
# This section checks if any user shell folders are set to the OneDrive directory.
|
||||||
parameters:
|
# It ensures the system's integrity by verifying the registry path and entries for user shell folders.
|
||||||
directoryGlob: '%LOCALAPPDATA%\Microsoft\OneDrive'
|
# If any user shell folder is found in OneDrive, a warning is issued, and the script stops to avoid system disruptions.
|
||||||
grantPermissions: true
|
beforeIteration: |-
|
||||||
-
|
$oneDriveUserFolderPattern = [System.Environment]::ExpandEnvironmentVariables('%USERPROFILE%\OneDrive') + '*'
|
||||||
function: DeleteDirectory
|
while ($true) { # Loop to control the execution of the subsequent code
|
||||||
parameters:
|
try {
|
||||||
directoryGlob: '%PROGRAMDATA%\Microsoft OneDrive'
|
$userShellFoldersRegistryPath = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders'
|
||||||
-
|
if (-not (Test-Path $userShellFoldersRegistryPath)) {
|
||||||
function: DeleteDirectory
|
Write-Output "Skipping verification: The registry path for user shell folders is missing: `"$userShellFoldersRegistryPath`""
|
||||||
parameters:
|
break;
|
||||||
directoryGlob: '%SYSTEMDRIVE%\OneDriveTemp'
|
|
||||||
-
|
|
||||||
name: Remove OneDrive shortcuts
|
|
||||||
recommend: strict
|
|
||||||
docs: |-
|
|
||||||
This script ensures the removal of all OneDrive shortcuts from your system, even after uninstallation or cleanup.
|
|
||||||
|
|
||||||
Erasing these shortcuts improves the security and privacy of your computer system, lessening the potential access points for
|
|
||||||
unwanted entities.
|
|
||||||
|
|
||||||
Moreover, the removal of unused shortcuts results in a more organized and efficient system, enhancing your user experience by
|
|
||||||
preventing any confusion from dead shortcuts.
|
|
||||||
|
|
||||||
Shortcuts that link to OneDrive are stored in various locations, such as:
|
|
||||||
|
|
||||||
- `Start Menu\Programs\Microsoft OneDrive.lnk`, `Start Menu\Programs\OneDrive.lnk`, `Links\OneDrive.lnk` [1],
|
|
||||||
- `ServiceProfiles\LocalService` and `ServiceProfiles\NetworkService` [1]
|
|
||||||
|
|
||||||
Below are the tested shortcut file locations on default installation (since Windows 10 22H2 and Windows 11 22H2):
|
|
||||||
|
|
||||||
| Path | Windows 11 | Windows 10 |
|
|
||||||
| ---- |:----------:|:----------:|
|
|
||||||
| `%APPDATA%\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ✅ Exists | ✅ Exists |
|
|
||||||
| `%USERPROFILE%\Links\OneDrive.lnk` | ❌ Missing | ❌ Missing |
|
|
||||||
| `%WINDIR%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ❌ Missing | ✅ Exists |
|
|
||||||
| `%WINDIR%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ❌ Missing | ✅ Exists |
|
|
||||||
|
|
||||||
In Windows 10 and higher, additional steps are necessary to delete the OneDrive icon from the navigation pane in Windows
|
|
||||||
Explorer [2], which is executed by this script.
|
|
||||||
|
|
||||||
[1]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
|
||||||
[2]: https://web.archive.org/web/20231002162805/https://learn.microsoft.com/en-us/sharepoint/troubleshoot/installation-and-setup/how-to-block-onedrive-from-being-advertised-after-install-office-2016 "How to block OneDrive.exe from being advertised after you install Office 2016 - SharePoint | Microsoft Learn"
|
|
||||||
call:
|
|
||||||
-
|
|
||||||
function: RemoveShortcutFiles
|
|
||||||
parameters:
|
|
||||||
targetFile: C:\Users\undergroundwires\AppData\Local\Microsoft\OneDrive\OneDrive.exe
|
|
||||||
shortcutItems: |-
|
|
||||||
@{ Revert = $True; Path = "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
|
||||||
@{ Revert = $False; Path = "$env:USERPROFILE\Links\OneDrive.lnk"; }
|
|
||||||
@{ Revert = $False; Path = "$env:WINDIR\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
|
||||||
@{ Revert = $False; Path = "$env:WINDIR\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
|
||||||
-
|
|
||||||
function: RunPowerShell
|
|
||||||
parameters:
|
|
||||||
code: |-
|
|
||||||
Set-Location "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace"
|
|
||||||
Get-ChildItem | ForEach-Object {Get-ItemProperty $_.pspath} | ForEach-Object {
|
|
||||||
$leftnavNodeName = $_."(default)";
|
|
||||||
if (($leftnavNodeName -eq "OneDrive") -Or ($leftnavNodeName -eq "OneDrive - Personal")) {
|
|
||||||
if (Test-Path $_.pspath) {
|
|
||||||
Write-Host "Deleting $($_.pspath)."
|
|
||||||
Remove-Item $_.pspath;
|
|
||||||
}
|
}
|
||||||
|
$userShellFoldersRegistryKeys = Get-ItemProperty -Path $userShellFoldersRegistryPath
|
||||||
|
$userShellFoldersEntries = @($userShellFoldersRegistryKeys.PSObject.Properties)
|
||||||
|
if ($userShellFoldersEntries.Count -eq 0) {
|
||||||
|
Write-Warning "Skipping verification: No entries found for user shell folders in the registry: `"$userShellFoldersRegistryPath`""
|
||||||
|
break;
|
||||||
|
}
|
||||||
|
Write-Output "Initiating verification: Checking if any of the ${userShellFoldersEntries.Count} user shell folders point to the OneDrive user folder pattern ($oneDriveUserFolderPattern)."
|
||||||
|
$userShellFoldersInOneDrive = @()
|
||||||
|
foreach ($registryEntry in $userShellFoldersEntries) {
|
||||||
|
$userShellFolderName = $registryEntry.Name
|
||||||
|
$userShellFolderPath = $registryEntry.Value
|
||||||
|
if (!$userShellFolderPath) {
|
||||||
|
Write-Output "Skipping: The user shell folder `"$userShellFolderName`" does not have a defined path."
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
$expandedUserShellFolderPath = [System.Environment]::ExpandEnvironmentVariables($userShellFolderPath)
|
||||||
|
if(-not ($expandedUserShellFolderPath -like $oneDriveUserFolderPattern)) {
|
||||||
|
continue
|
||||||
|
}
|
||||||
|
$userShellFoldersInOneDrive += [PSCustomObject]@{ Name = $userShellFolderName; Path = $expandedUserShellFolderPath }
|
||||||
|
}
|
||||||
|
if ($userShellFoldersInOneDrive.Count -gt 0) {
|
||||||
|
$warningMessage = 'To keep your computer running smoothly, OneDrive user folder will not be deleted.'
|
||||||
|
$warningMessage += "`nIt's being used by the OS as a user shell directory for the following folders:"
|
||||||
|
$userShellFoldersInOneDrive.ForEach({
|
||||||
|
$warningMessage += "`n- $($_.Name): $($_.Path)"
|
||||||
|
})
|
||||||
|
Write-Warning $warningMessage
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
Write-Output "Successfully verified that none of the $($userShellFoldersEntries.Count) user shell folders point to the OneDrive user folder pattern."
|
||||||
|
break;
|
||||||
|
} catch {
|
||||||
|
Write-Warning "An error occurred during verification of user shell folders. Skipping prevent potential issues. Error: $($_.Exception.Message)"
|
||||||
|
exit 0
|
||||||
}
|
}
|
||||||
}
|
}
|
||||||
-
|
# Data Loss Prevention Guard: Checking directory contents
|
||||||
name: Disable OneDrive usage
|
# This guard ensures that no file or non-empty directory is accidentally deleted.
|
||||||
recommend: strict
|
# It checks each path; if it's a file or a non-empty directory, the script skips deletion for that path.
|
||||||
docs: |-
|
# This step is designed to prevent unintended data loss during script execution.
|
||||||
This script prevents [1]:
|
duringIteration: |-
|
||||||
|
try {
|
||||||
- Keeping OneDrive files in sync with the cloud.
|
if (Test-Path -Path $path -PathType Leaf) {
|
||||||
- Users from automatically uploading photos and videos from the camera roll folder.
|
Write-Warning "Retaining file `"$path`" to safeguard your data."
|
||||||
- Users from accessing OneDrive from the OneDrive app and file picker.
|
continue;
|
||||||
- Windows Store apps from accessing OneDrive using the WinRT API.
|
} elseif (Test-Path -Path $path -PathType Container) {
|
||||||
- OneDrive from appearing in the navigation pane in File Explorer.
|
if ((Get-ChildItem "$path" -Recurse | Measure-Object).Count -gt 0) {
|
||||||
|
Write-Warning "Preserving non-empty folder `"$path`" to protect your files."
|
||||||
Setting `DisableFileSyncNGSC` group policy prevents OneDrive from working on both Windows 10 and 11 [1] [2].
|
continue;
|
||||||
Windows 8 uses older `DisableFileSync` key [3].
|
}
|
||||||
|
}
|
||||||
These policies do not exist by default in clean installations.
|
} catch {
|
||||||
|
Write-Warning "An error occurred while processing `"$path`". Skipping to protect your data. Error: $($_.Exception.Message)"
|
||||||
[1]: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.OneDrive::PreventOnedriveFileSync "Prevent the usage of OneDrive for file storage | admx.help"
|
continue;
|
||||||
[2]: https://support.microsoft.com/en-us/office/onedrive-won-t-start-0c158fa6-0cd8-4373-98c8-9179e24f10f2 "OneDrive won't start | support.microsoft.com"
|
|
||||||
[3]: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.OneDrive::PreventOnedriveFileSyncForBlue "Prevent the usage of OneDrive for file storage on Windows 8.1 | admx.help"
|
|
||||||
code: |-
|
|
||||||
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /t REG_DWORD /v "DisableFileSyncNGSC" /d 1 /f
|
|
||||||
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /t REG_DWORD /v "DisableFileSync" /d 1 /f
|
|
||||||
revertCode: |-
|
|
||||||
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /f 2>nul
|
|
||||||
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSync" /f 2>nul
|
|
||||||
-
|
|
||||||
name: Disable automatic OneDrive installation
|
|
||||||
docs: |-
|
|
||||||
Windows 10 comes with `OneDriveSetup` entry in startup for automatic reinstallations even though
|
|
||||||
OneDrive is uninstalled. This entry is missing in Windows 11 by default.
|
|
||||||
|
|
||||||
`OneDriveSetup` is registered to reinstall OneDrive and can be removed using registry [1],
|
|
||||||
as recommended by Microsoft for optimizing Windows VDIs [1].
|
|
||||||
|
|
||||||
[1]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
|
||||||
recommend: strict
|
|
||||||
call:
|
|
||||||
function: RunPowerShell
|
|
||||||
parameters:
|
|
||||||
code: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f 2>$null
|
|
||||||
revertCode: |-
|
|
||||||
function Test-IsWindows11 { ($osVersion.Major -gt 10) -or (($osVersion.Major -eq 10) -and ($osVersion.Build -ge 22000)) }
|
|
||||||
if (Test-IsWindows11) {
|
|
||||||
Write-Host 'Skipping, no action needed on Windows 11.'
|
|
||||||
} else {
|
|
||||||
if([Environment]::Is64BitOperatingSystem) {
|
|
||||||
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "OneDriveSetup" /t REG_SZ /d "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe /silent" /f
|
|
||||||
} else {
|
|
||||||
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "OneDriveSetup" /t REG_SZ /d "%SYSTEMROOT%\System32\OneDriveSetup.exe /silent" /f
|
|
||||||
}
|
}
|
||||||
}
|
-
|
||||||
-
|
name: Remove OneDrive installation files and cache
|
||||||
name: Remove OneDrive folder from File Explorer
|
recommend: strict
|
||||||
recommend: strict
|
docs: |-
|
||||||
docs: |-
|
This script removes OneDrive installation directories, application data, temporary files, and cache.
|
||||||
File Explorer shows OneDrive to allow you to access files stored in OneDrive (stored online and locally cached) [1].
|
|
||||||
|
|
||||||
[CLSID](https://learn.microsoft.com/en-us/windows/win32/com/clsid-key-hklm) for OneDrive is `018D5C66-4533-4307-9B53-224DE2ED1FE6` [2] for
|
- `C:\OneDriveCache`: A location for temporary cache files [1].
|
||||||
both Windows 10 and 11. Changing pinning option for this key removed OneDrive from navigation file in File Explorer [2].
|
- `C:\ProgramData\Microsoft OneDrive`: Stores data used in setting up OneDrive [2] [3].
|
||||||
|
- `C:\Users\<username>\AppData\Local\Microsoft\OneDrive`: OneDrive installation directory [4].
|
||||||
|
|
||||||
This CLSID includes `System.IsPinnedToNameSpaceTree` as value as `1` after clean installation in both Windows 10 and Windows 11.
|
Identified by the community [1] and confirmed through testing, these folders include:
|
||||||
|
|
||||||
[1]: https://support.microsoft.com/en-us/office/sync-files-with-onedrive-in-windows-615391c4-2bd3-4aae-a42a-858262e42a49 "Sync files with OneDrive in Windows | support.microsoft.com"
|
| Directory | Windows 11 (since 22H2) | Windows 10 (since 22H2) |
|
||||||
[2]: https://answers.microsoft.com/en-us/windows/forum/all/remove-onedrive-from-file-explorer-navigation-pane/38ac7524-2b35-4ffc-baab-40ad61dc5d79 "Remove OneDrive from File Explorer navigation pane - Microsoft Community | answers.microsoft.com"
|
| --------- |:-----------------------:|:-----------------------:|
|
||||||
code: |-
|
| `%SYSTEMDRIVE%\OneDriveCache` | ❌ Missing | ❌ Missing |
|
||||||
reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "0" /t REG_DWORD /f
|
| `%PROGRAMDATA%\Microsoft OneDrive` | ✅ Exists | ✅ Exists |
|
||||||
reg add "HKCR\Wow6432Node\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "0" /t REG_DWORD /f
|
| `%LOCALAPPDATA%\Microsoft\OneDrive` | ✅ Exists | ✅ Exists |
|
||||||
revertCode: |-
|
|
||||||
reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "1" /t REG_DWORD /f
|
|
||||||
reg add "HKCR\Wow6432Node\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "1" /t REG_DWORD /f
|
|
||||||
-
|
|
||||||
name: Disable OneDrive scheduled tasks
|
|
||||||
recommend: strict
|
|
||||||
docs: |-
|
|
||||||
This script disables the scheduled tasks associated with Microsoft OneDrive that typically
|
|
||||||
run maintenance activities such as auto-updates [1] [2] [3] and data collection [2].
|
|
||||||
Disabling these tasks impacts OneDrive's automatic background update process [1] [2] [3].
|
|
||||||
|
|
||||||
By default, Windows 10 (since 22H2) and Windows 11 (since 22H2) include the following tasks:
|
[1]: https://web.archive.org/web/20231206213533/https://social.microsoft.com/Forums/en-US/53263a51-856f-4e64-bc0e-a689d4cc5a8b/release-notes-for-1907-build-29711727413?forum=FSLogix "Release Notes for 1907 - build 2.9.7117.27413 | social.microsoft.com"
|
||||||
- `OneDrive Standalone Update Task` [1] [2] [3]
|
[2]: https://web.archive.org/web/20231231134443/https://techcommunity.microsoft.com/t5/sharepoint/onedrive-setup-fails-to-complete/m-p/2072446 "OneDrive setup fails to complete - Microsoft Tech Community"
|
||||||
- `OneDrive Reporting Task` [1]
|
[3]: https://web.archive.org/web/20231231134548/https://answers.microsoft.com/en-us/msoffice/forum/all/why-does-onedrive-act-as-ransomware/288e5940-b92b-493c-91ff-dafd26279bee "Why does OneDrive act as Ransomware? - Microsoft Community"
|
||||||
|
[4]: https://web.archive.org/web/20231231134612/https://learn.microsoft.com/en-us/sharepoint/install/configure-syncing-with-the-onedrive-sync-app "Configure syncing with the new OneDrive sync app - SharePoint Server | Microsoft Learn | learn.microsoft.com"
|
||||||
|
call:
|
||||||
|
-
|
||||||
|
function: DeleteDirectory
|
||||||
|
parameters:
|
||||||
|
directoryGlob: '%LOCALAPPDATA%\Microsoft\OneDrive'
|
||||||
|
grantPermissions: true
|
||||||
|
-
|
||||||
|
function: DeleteDirectory
|
||||||
|
parameters:
|
||||||
|
directoryGlob: '%PROGRAMDATA%\Microsoft OneDrive'
|
||||||
|
-
|
||||||
|
function: DeleteDirectory
|
||||||
|
parameters:
|
||||||
|
directoryGlob: '%SYSTEMDRIVE%\OneDriveTemp'
|
||||||
|
-
|
||||||
|
name: Remove OneDrive shortcuts
|
||||||
|
recommend: strict
|
||||||
|
docs: |-
|
||||||
|
This script ensures the removal of all OneDrive shortcuts from your system, even after uninstallation or cleanup.
|
||||||
|
|
||||||
These tasks are enabled by default and lack official documentation from Microsoft. They can be identified
|
Erasing these shortcuts improves the security and privacy of your computer system, lessening the potential access points for
|
||||||
by executing `Get-ScheduledTask 'OneDrive *' | Select -ExpandProperty TaskName` in PowerShell.
|
unwanted entities.
|
||||||
These tasks are observed to persist even after OneDrive is uninstalled.
|
|
||||||
|
|
||||||
The tasks appear with a Security Identifier (SID) unique to each installation [1], following this pattern:
|
Moreover, the removal of unused shortcuts results in a more organized and efficient system, enhancing your user experience by
|
||||||
- `OneDrive Reporting Task-S-1-5-21-xxxxxx`
|
preventing any confusion from dead shortcuts.
|
||||||
- `OneDrive Standalone Update Task-S-1-5-21-xxxxxx`
|
|
||||||
|
|
||||||
The SID, denoted by 'xxxxxx', varies per installation and represents the user account associated with the task.
|
Shortcuts that link to OneDrive are stored in various locations, such as:
|
||||||
SID of user accounts always start with `S-1-5-21` [4], the rest of the number chages per user.
|
|
||||||
To see all user SIDs, you can run `wmic useraccount get Name,sid`.
|
|
||||||
The SID for your account can be confirmed using `whoami /user`.
|
|
||||||
A SID which doesn't correspond to any user account may appear.
|
|
||||||
This is be due to system preparation processes (`sysprep`) that use different SIDs for tasks to prevent duplication [5].
|
|
||||||
|
|
||||||
Disabling tasks with standard user SIDs is straightforward, but attempting to disable tasks with unpredictable SIDs can
|
- `Start Menu\Programs\Microsoft OneDrive.lnk`, `Start Menu\Programs\OneDrive.lnk`, `Links\OneDrive.lnk` [1],
|
||||||
result in an error message: `Catastrophic failure (Exception from HRESULT: 0x80000FFF (E_UNEXPECTED))`.
|
- `ServiceProfiles\LocalService` and `ServiceProfiles\NetworkService` [1]
|
||||||
|
|
||||||
Nonetheless, disabling tasks with the correct SID is achievable using the provided script, which locates the full task names
|
Below are the tested shortcut file locations on default installation (since Windows 10 22H2 and Windows 11 22H2):
|
||||||
including the SIDs.
|
|
||||||
|
|
||||||
If OneDrive is installed for all users on a machine (which is not the default behavior [6]), an additional task is present:
|
| Path | Windows 11 | Windows 10 |
|
||||||
- `OneDrive Per-Machine Standalone Update` [1] [7].
|
| ---- |:----------:|:----------:|
|
||||||
|
| `%APPDATA%\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ✅ Exists | ✅ Exists |
|
||||||
|
| `%USERPROFILE%\Links\OneDrive.lnk` | ❌ Missing | ❌ Missing |
|
||||||
|
| `%WINDIR%\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ❌ Missing | ✅ Exists |
|
||||||
|
| `%WINDIR%\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk` | ❌ Missing | ✅ Exists |
|
||||||
|
|
||||||
Disabling the `OneDrive Standalone Update Task` is recommended by Microsoft to improve system performance and reduce
|
In Windows 10 and higher, additional steps are necessary to delete the OneDrive icon from the navigation pane in Windows
|
||||||
unnecessary data collection [2].
|
Explorer [2], which is executed by this script.
|
||||||
|
|
||||||
### Overview of default task statuses
|
[1]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
||||||
|
[2]: https://web.archive.org/web/20231002162805/https://learn.microsoft.com/en-us/sharepoint/troubleshoot/installation-and-setup/how-to-block-onedrive-from-being-advertised-after-install-office-2016 "How to block OneDrive.exe from being advertised after you install Office 2016 - SharePoint | Microsoft Learn"
|
||||||
|
call:
|
||||||
|
-
|
||||||
|
function: RemoveShortcutFiles
|
||||||
|
parameters:
|
||||||
|
targetFile: C:\Users\undergroundwires\AppData\Local\Microsoft\OneDrive\OneDrive.exe
|
||||||
|
shortcutItems: |-
|
||||||
|
@{ Revert = $True; Path = "$env:APPDATA\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
||||||
|
@{ Revert = $False; Path = "$env:USERPROFILE\Links\OneDrive.lnk"; }
|
||||||
|
@{ Revert = $False; Path = "$env:WINDIR\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
||||||
|
@{ Revert = $False; Path = "$env:WINDIR\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"; }
|
||||||
|
-
|
||||||
|
function: RunPowerShell
|
||||||
|
parameters:
|
||||||
|
code: |-
|
||||||
|
Set-Location "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace"
|
||||||
|
Get-ChildItem | ForEach-Object {Get-ItemProperty $_.pspath} | ForEach-Object {
|
||||||
|
$leftnavNodeName = $_."(default)";
|
||||||
|
if (($leftnavNodeName -eq "OneDrive") -Or ($leftnavNodeName -eq "OneDrive - Personal")) {
|
||||||
|
if (Test-Path $_.pspath) {
|
||||||
|
Write-Host "Deleting $($_.pspath)."
|
||||||
|
Remove-Item $_.pspath;
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
-
|
||||||
|
name: Disable OneDrive usage
|
||||||
|
recommend: strict
|
||||||
|
docs: |-
|
||||||
|
This script prevents [1]:
|
||||||
|
|
||||||
`\OneDrive Reporting Task-$SID`:
|
- Keeping OneDrive files in sync with the cloud.
|
||||||
|
- Users from automatically uploading photos and videos from the camera roll folder.
|
||||||
|
- Users from accessing OneDrive from the OneDrive app and file picker.
|
||||||
|
- Windows Store apps from accessing OneDrive using the WinRT API.
|
||||||
|
- OneDrive from appearing in the navigation pane in File Explorer.
|
||||||
|
|
||||||
| OS Version | Default status |
|
Setting `DisableFileSyncNGSC` group policy prevents OneDrive from working on both Windows 10 and 11 [1] [2].
|
||||||
| ---------------- | -------------- |
|
Windows 8 uses older `DisableFileSync` key [3].
|
||||||
| Windows 10 22H2 | 🟢 Ready |
|
|
||||||
| Windows 11 22H2 | 🟢 Ready |
|
|
||||||
|
|
||||||
`\OneDrive Standalone Update Task-$SID`:
|
These policies do not exist by default in clean installations.
|
||||||
|
|
||||||
| OS Version | Default status |
|
[1]: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.OneDrive::PreventOnedriveFileSync "Prevent the usage of OneDrive for file storage | admx.help"
|
||||||
| ---------------- | -------------- |
|
[2]: https://support.microsoft.com/en-us/office/onedrive-won-t-start-0c158fa6-0cd8-4373-98c8-9179e24f10f2 "OneDrive won't start | support.microsoft.com"
|
||||||
| Windows 10 22H2 | 🟢 Ready |
|
[3]: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.OneDrive::PreventOnedriveFileSyncForBlue "Prevent the usage of OneDrive for file storage on Windows 8.1 | admx.help"
|
||||||
| Windows 11 22H2 | 🟢 Ready |
|
code: |-
|
||||||
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /t REG_DWORD /v "DisableFileSyncNGSC" /d 1 /f
|
||||||
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /t REG_DWORD /v "DisableFileSync" /d 1 /f
|
||||||
|
revertCode: |-
|
||||||
|
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /f 2>nul
|
||||||
|
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSync" /f 2>nul
|
||||||
|
-
|
||||||
|
name: Disable automatic OneDrive installation
|
||||||
|
docs: |-
|
||||||
|
Windows 10 comes with `OneDriveSetup` entry in startup for automatic reinstallations even though
|
||||||
|
OneDrive is uninstalled. This entry is missing in Windows 11 by default.
|
||||||
|
|
||||||
`\OneDrive Per-Machine Standalone Update`:
|
`OneDriveSetup` is registered to reinstall OneDrive and can be removed using registry [1],
|
||||||
|
as recommended by Microsoft for optimizing Windows VDIs [1].
|
||||||
|
|
||||||
| OS Version | Default status |
|
[1]: https://web.archive.org/web/20231002162808/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds_vdi-recommendations-1909#remove-onedrive-components "Optimizing Windows 10, version 1909, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn"
|
||||||
| ---------------- | -------------- |
|
recommend: strict
|
||||||
| Windows 10 22H2 | 🟡 N/A (missing) |
|
call:
|
||||||
| Windows 11 22H2 | 🟡 N/A (missing) |
|
function: RunPowerShell
|
||||||
|
|
||||||
[1]: https://web.archive.org/web/20231104142218/https://docs.fra.me/blog/2023/08/04/application-optimizations-microsoft-onedrive/#scheduled-tasks "Application Optimization Essentials: Microsoft OneDrive | Frame Platform Documentation | docs.fra.me"
|
|
||||||
[2]: https://web.archive.org/web/20231104142209/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-vdi-recommendations-1803 "Optimizing Windows 10, version 1803, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn | learn.microsoft.com"
|
|
||||||
[3]: https://web.archive.org/web/20231104142301/http://windows.fyicenter.com/5623_OneDrive_Standalone_Update_Task-S-1-_Scheduled_Task_on_Windows_7.html '"OneDrive Standalone Update Task-S-1-..." Scheduled Task on Windows 7 | windows.fyicenter.com'
|
|
||||||
[4]: https://web.archive.org/web/20231104133125/https://renenyffenegger.ch/notes/Windows/security/SID/index "Windows security identifiers (SID) | renenyffenegger.ch"
|
|
||||||
[5]: https://en.wikipedia.org/w/index.php?title=Windows_Task_Scheduler&oldid=1086196699#Bugs "Windows Task Scheduler - Wikipedia | wikipedia.rg"
|
|
||||||
[6]: https://web.archive.org/web/20231104142412/https://learn.microsoft.com/en-us/sharepoint/per-machine-installation "Install the sync app per-machine (Windows) - SharePoint in Microsoft 365 | Microsoft Learn | learn.microsoft.com"
|
|
||||||
[7]: https://web.archive.org/web/20231104142343/https://docs.citrix.com/en-us/tech-zone/build/deployment-guides/microsoft-365-citrix.html "Deployment Guide: Microsoft 365 with Citrix Virtual Apps and Desktops | docs.citrix.com"
|
|
||||||
call:
|
|
||||||
-
|
|
||||||
function: DisableScheduledTask
|
|
||||||
parameters:
|
parameters:
|
||||||
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Reporting Task-*'
|
code: reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f 2>$null
|
||||||
taskPathPattern: \
|
revertCode: |-
|
||||||
taskNamePattern: OneDrive Reporting Task-*
|
$osVersion = [System.Environment]::OSVersion.Version
|
||||||
-
|
function Test-IsWindows11 { ($osVersion.Major -gt 10) -or (($osVersion.Major -eq 10) -and ($osVersion.Build -ge 22000)) }
|
||||||
function: DisableScheduledTask
|
if (Test-IsWindows11) {
|
||||||
parameters:
|
Write-Host 'Skipping, no action needed on Windows 11.'
|
||||||
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Standalone Update Task-*'
|
} else {
|
||||||
taskPathPattern: \
|
if([Environment]::Is64BitOperatingSystem) {
|
||||||
taskNamePattern: OneDrive Standalone Update Task-*
|
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "OneDriveSetup" /t REG_SZ /d "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe /silent" /f
|
||||||
-
|
} else {
|
||||||
function: DisableScheduledTask
|
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "OneDriveSetup" /t REG_SZ /d "%SYSTEMROOT%\System32\OneDriveSetup.exe /silent" /f
|
||||||
parameters:
|
}
|
||||||
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Per-Machine Standalone Update'
|
}
|
||||||
taskPathPattern: \
|
-
|
||||||
taskNamePattern: OneDrive Per-Machine Standalone Update
|
name: Remove OneDrive folder from File Explorer
|
||||||
-
|
recommend: strict
|
||||||
name: Clear OneDrive environment variable
|
docs: |-
|
||||||
recommend: strict
|
File Explorer shows OneDrive to allow you to access files stored in OneDrive (stored online and locally cached) [1].
|
||||||
docs: |-
|
|
||||||
Since Windows 10 1809, Microsoft introduced `%OneDrive%` environment variable to
|
|
||||||
reach OneDrive through an alias [1]. This variable is redundant when OneDrive is
|
|
||||||
undesired.
|
|
||||||
|
|
||||||
This script deletes `OneDrive` environment variable [2].
|
[CLSID](https://learn.microsoft.com/en-us/windows/win32/com/clsid-key-hklm) for OneDrive is `018D5C66-4533-4307-9B53-224DE2ED1FE6` [2] for
|
||||||
|
both Windows 10 and 11. Changing pinning option for this key removed OneDrive from navigation file in File Explorer [2].
|
||||||
|
|
||||||
`OneDrive` key at `HKCU\Environment` is found on both Windows 10 and Windows 11.
|
This CLSID includes `System.IsPinnedToNameSpaceTree` as value as `1` after clean installation in both Windows 10 and Windows 11.
|
||||||
|
|
||||||
[1]: https://superuser.com/a/1397495 "Determine OneDrive synchronisation folders - Super User | superuser.com"
|
[1]: https://web.archive.org/web/20231025220530/https://support.microsoft.com/en-us/office/sync-files-with-onedrive-in-windows-615391c4-2bd3-4aae-a42a-858262e42a49 "Sync files with OneDrive in Windows | support.microsoft.com"
|
||||||
[2]: https://stackoverflow.com/questions/46744840/export-registry-value-to-file-and-then-set-a-variable-in-batch "Export registry value to file and then set a variable in Batch - Stack Overflow | stackoverflow.com"
|
[2]: https://answers.microsoft.com/en-us/windows/forum/all/remove-onedrive-from-file-explorer-navigation-pane/38ac7524-2b35-4ffc-baab-40ad61dc5d79 "Remove OneDrive from File Explorer navigation pane - Microsoft Community | answers.microsoft.com"
|
||||||
code: reg delete "HKCU\Environment" /v "OneDrive" /f 2>nul
|
code: |-
|
||||||
|
reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "0" /t REG_DWORD /f
|
||||||
|
reg add "HKCR\Wow6432Node\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "0" /t REG_DWORD /f
|
||||||
|
revertCode: |-
|
||||||
|
reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "1" /t REG_DWORD /f
|
||||||
|
reg add "HKCR\Wow6432Node\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d "1" /t REG_DWORD /f
|
||||||
|
-
|
||||||
|
name: Disable OneDrive scheduled tasks
|
||||||
|
recommend: strict
|
||||||
|
docs: |-
|
||||||
|
This script disables the scheduled tasks associated with Microsoft OneDrive that typically
|
||||||
|
run maintenance activities such as auto-updates [1] [2] [3] and data collection [2].
|
||||||
|
Disabling these tasks impacts OneDrive's automatic background update process [1] [2] [3].
|
||||||
|
|
||||||
|
By default, Windows 10 (since 22H2) and Windows 11 (since 22H2) include the following tasks:
|
||||||
|
- `OneDrive Standalone Update Task` [1] [2] [3]
|
||||||
|
- `OneDrive Reporting Task` [1]
|
||||||
|
|
||||||
|
These tasks are enabled by default and lack official documentation from Microsoft. They can be identified
|
||||||
|
by executing `Get-ScheduledTask 'OneDrive *' | Select -ExpandProperty TaskName` in PowerShell.
|
||||||
|
These tasks are observed to persist even after OneDrive is uninstalled.
|
||||||
|
|
||||||
|
The tasks appear with a Security Identifier (SID) unique to each installation [1], following this pattern:
|
||||||
|
- `OneDrive Reporting Task-S-1-5-21-xxxxxx`
|
||||||
|
- `OneDrive Standalone Update Task-S-1-5-21-xxxxxx`
|
||||||
|
|
||||||
|
The SID, denoted by 'xxxxxx', varies per installation and represents the user account associated with the task.
|
||||||
|
SID of user accounts always start with `S-1-5-21` [4], the rest of the number chages per user.
|
||||||
|
To see all user SIDs, you can run `wmic useraccount get Name,sid`.
|
||||||
|
The SID for your account can be confirmed using `whoami /user`.
|
||||||
|
A SID which doesn't correspond to any user account may appear.
|
||||||
|
This is be due to system preparation processes (`sysprep`) that use different SIDs for tasks to prevent duplication [5].
|
||||||
|
|
||||||
|
Disabling tasks with standard user SIDs is straightforward, but attempting to disable tasks with unpredictable SIDs can
|
||||||
|
result in an error message: `Catastrophic failure (Exception from HRESULT: 0x80000FFF (E_UNEXPECTED))`.
|
||||||
|
|
||||||
|
Nonetheless, disabling tasks with the correct SID is achievable using the provided script, which locates the full task names
|
||||||
|
including the SIDs.
|
||||||
|
|
||||||
|
If OneDrive is installed for all users on a machine (which is not the default behavior [6]), an additional task is present:
|
||||||
|
- `OneDrive Per-Machine Standalone Update` [1] [7].
|
||||||
|
|
||||||
|
Disabling the `OneDrive Standalone Update Task` is recommended by Microsoft to improve system performance and reduce
|
||||||
|
unnecessary data collection [2].
|
||||||
|
|
||||||
|
### Overview of default task statuses
|
||||||
|
|
||||||
|
`\OneDrive Reporting Task-$SID`:
|
||||||
|
|
||||||
|
| OS Version | Default status |
|
||||||
|
| ---------------- | -------------- |
|
||||||
|
| Windows 10 22H2 | 🟢 Ready |
|
||||||
|
| Windows 11 22H2 | 🟢 Ready |
|
||||||
|
|
||||||
|
`\OneDrive Standalone Update Task-$SID`:
|
||||||
|
|
||||||
|
| OS Version | Default status |
|
||||||
|
| ---------------- | -------------- |
|
||||||
|
| Windows 10 22H2 | 🟢 Ready |
|
||||||
|
| Windows 11 22H2 | 🟢 Ready |
|
||||||
|
|
||||||
|
`\OneDrive Per-Machine Standalone Update`:
|
||||||
|
|
||||||
|
| OS Version | Default status |
|
||||||
|
| ---------------- | -------------- |
|
||||||
|
| Windows 10 22H2 | 🟡 N/A (missing) |
|
||||||
|
| Windows 11 22H2 | 🟡 N/A (missing) |
|
||||||
|
|
||||||
|
[1]: https://web.archive.org/web/20231104142218/https://docs.fra.me/blog/2023/08/04/application-optimizations-microsoft-onedrive/#scheduled-tasks "Application Optimization Essentials: Microsoft OneDrive | Frame Platform Documentation | docs.fra.me"
|
||||||
|
[2]: https://web.archive.org/web/20231104142209/https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/rds-vdi-recommendations-1803 "Optimizing Windows 10, version 1803, for a Virtual Desktop Infrastructure (VDI) role | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[3]: https://web.archive.org/web/20231104142301/http://windows.fyicenter.com/5623_OneDrive_Standalone_Update_Task-S-1-_Scheduled_Task_on_Windows_7.html '"OneDrive Standalone Update Task-S-1-..." Scheduled Task on Windows 7 | windows.fyicenter.com'
|
||||||
|
[4]: https://web.archive.org/web/20231104133125/https://renenyffenegger.ch/notes/Windows/security/SID/index "Windows security identifiers (SID) | renenyffenegger.ch"
|
||||||
|
[5]: https://en.wikipedia.org/w/index.php?title=Windows_Task_Scheduler&oldid=1086196699#Bugs "Windows Task Scheduler - Wikipedia | wikipedia.rg"
|
||||||
|
[6]: https://web.archive.org/web/20231104142412/https://learn.microsoft.com/en-us/sharepoint/per-machine-installation "Install the sync app per-machine (Windows) - SharePoint in Microsoft 365 | Microsoft Learn | learn.microsoft.com"
|
||||||
|
[7]: https://web.archive.org/web/20231104142343/https://docs.citrix.com/en-us/tech-zone/build/deployment-guides/microsoft-365-citrix.html "Deployment Guide: Microsoft 365 with Citrix Virtual Apps and Desktops | docs.citrix.com"
|
||||||
|
call:
|
||||||
|
-
|
||||||
|
function: DisableScheduledTask
|
||||||
|
parameters:
|
||||||
|
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Reporting Task-*'
|
||||||
|
taskPathPattern: \
|
||||||
|
taskNamePattern: OneDrive Reporting Task-*
|
||||||
|
-
|
||||||
|
function: DisableScheduledTask
|
||||||
|
parameters:
|
||||||
|
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Standalone Update Task-*'
|
||||||
|
taskPathPattern: \
|
||||||
|
taskNamePattern: OneDrive Standalone Update Task-*
|
||||||
|
-
|
||||||
|
function: DisableScheduledTask
|
||||||
|
parameters:
|
||||||
|
# Check: Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive Per-Machine Standalone Update'
|
||||||
|
taskPathPattern: \
|
||||||
|
taskNamePattern: OneDrive Per-Machine Standalone Update
|
||||||
|
-
|
||||||
|
name: Clear OneDrive environment variable
|
||||||
|
recommend: strict
|
||||||
|
docs: |-
|
||||||
|
Since Windows 10 1809, Microsoft introduced `%OneDrive%` environment variable to
|
||||||
|
reach OneDrive through an alias [1]. This variable is redundant when OneDrive is
|
||||||
|
undesired.
|
||||||
|
|
||||||
|
This script deletes `OneDrive` environment variable [2].
|
||||||
|
|
||||||
|
`OneDrive` key at `HKCU\Environment` is found on both Windows 10 and Windows 11.
|
||||||
|
|
||||||
|
[1]: https://superuser.com/a/1397495 "Determine OneDrive synchronisation folders - Super User | superuser.com"
|
||||||
|
[2]: https://stackoverflow.com/questions/46744840/export-registry-value-to-file-and-then-set-a-variable-in-batch "Export registry value to file and then set a variable in Batch - Stack Overflow | stackoverflow.com"
|
||||||
|
code: reg delete "HKCU\Environment" /v "OneDrive" /f 2>nul
|
||||||
-
|
-
|
||||||
category: Remove Edge (Chromium)
|
category: Remove Edge (Chromium)
|
||||||
docs: |-
|
docs: |-
|
||||||
@@ -17785,6 +17904,10 @@ functions:
|
|||||||
- name: directoryGlob # The directory to delete along with its files and subdirectories
|
- name: directoryGlob # The directory to delete along with its files and subdirectories
|
||||||
- name: grantPermissions # Grants permission on the parent directory and its sub-items recursively (including all files and directories) to be able to delete them.
|
- name: grantPermissions # Grants permission on the parent directory and its sub-items recursively (including all files and directories) to be able to delete them.
|
||||||
optional: true
|
optional: true
|
||||||
|
- name: beforeIteration # (Iteration callback) Code to run before iteration.
|
||||||
|
optional: true
|
||||||
|
- name: duringIteration # (Iteration callback) Code to run for each found item.
|
||||||
|
optional: true
|
||||||
call:
|
call:
|
||||||
-
|
-
|
||||||
function: Comment
|
function: Comment
|
||||||
@@ -17803,6 +17926,8 @@ functions:
|
|||||||
$($directoryGlob = '{{ $directoryGlob }}'; if (-Not $directoryGlob.EndsWith('\')) { $directoryGlob += '\' }; $directoryGlob )
|
$($directoryGlob = '{{ $directoryGlob }}'; if (-Not $directoryGlob.EndsWith('\')) { $directoryGlob += '\' }; $directoryGlob )
|
||||||
grantPermissions: '{{ with $grantPermissions }}true{{ end }}'
|
grantPermissions: '{{ with $grantPermissions }}true{{ end }}'
|
||||||
recurse: 'true' # Logs every deleted file name
|
recurse: 'true' # Logs every deleted file name
|
||||||
|
beforeIteration: '{{ with $beforeIteration }}{{ . }}{{ end }}'
|
||||||
|
duringIteration: '{{ with $duringIteration }}{{ . }}{{ end }}'
|
||||||
-
|
-
|
||||||
name: DeleteFiles
|
name: DeleteFiles
|
||||||
# 💡 Purpose:
|
# 💡 Purpose:
|
||||||
|
|||||||
Reference in New Issue
Block a user