Microsoft’s New OneDrive Backup Prompts: Managing Business Data in the Cloud for West Houston Businesses
Cloud Control: Preparing for Microsoft’s Next OneDrive Backup Push
Microsoft's Known Folder Move prompts can move Desktop, Documents, and Pictures to the cloud. Three admin policies decide whether that happens on your terms.
Microsoft 365 now prompts users in Word, Excel, and PowerPoint to back up their files to OneDrive via Known Folder Move - and IT keeps control through three Group Policy settings.
As reported by BleepingComputer, the prompt reads: "BACK UP THIS DOCUMENT: Share and work with others in this and other files using OneDrive." Click "Open OneDrive" and the user picks which folders to back up. It went to public preview through early April 2025 and reached general availability worldwide by early May 2025. Cloud backup is genuinely useful - but on a business device, who turns it on and where the data lands should be your decision, not a default prompt's.
What Microsoft Changed
A backup nudge inside the apps your team uses every day.
Known Folder Move (KFM) redirects the Windows Desktop, Documents, and Pictures folders to OneDrive so files sync to the cloud automatically - and the new prompts push users to enroll.
KFM itself is not new; the change is that Microsoft is now actively prompting for it from within Word, Excel, and PowerPoint, rather than leaving enrollment to IT. For an individual, that is a reasonable safety net against a lost laptop. For an organization, it means end users can start moving business folders to the cloud without going through IT - which is exactly why the control policies below matter.
Why IT Administrators Should Care
Convenience for the user can be a blind spot for the business.
Uncontrolled KFM adoption raises real risks - from where regulated data lives to how much bandwidth folder syncing consumes.
- Data governance. Automatically backing up business documents to OneDrive can create compliance gaps, especially in regulated industries.
- Shadow IT. Users could inadvertently route sensitive company data toward personal OneDrive accounts.
- User confusion. The prompts can clash with backup procedures your team already follows.
- Bandwidth usage. Mass KFM adoption can spike network traffic as folders sync to the cloud.
- Loss of visibility. IT can lose track of where company data actually resides once users opt in on their own.
None of this means KFM is bad - used deliberately, it is a solid backup layer. The problem is adoption happening by prompt instead of by policy.
How to Control It: Admin Options
Three Group Policy settings put the decision back in IT's hands.
Choose your posture - block it, allow it on your terms, or lock out personal accounts - then deploy the matching policy by Group Policy or Intune before the prompts reach your users.
Option 1 - Block Known Folder Move completely
Enable the Group Policy "Prevent users from moving their Windows known folders to OneDrive." This sets:
Option 2 - Allow KFM, but on your terms
Configure "Silently move Windows known folders to OneDrive" with your tenant ID, and specify which of Desktop, Documents, and Pictures may be redirected:
Option 3 - Prevent personal OneDrive use
Enable "Prevent users from syncing personal OneDrive accounts" so business folders can never land in a personal account:
Microsoft notes that moving known folders to personal OneDrive is already blocked on domain-joined PCs; this policy adds a belt-and-suspenders layer for compliance.
A quick admin checklist before the prompts reach your users:
- Review current policies. Assess your existing OneDrive and cloud-storage settings.
- Update Group Policy. Deploy the setting that matches your posture before rollout.
- Communicate. Tell users what your cloud-storage policy is and what the prompt means.
- Audit usage. Understand how OneDrive is actually being used today.
- Consider a hybrid approach. Allow KFM for some groups while restricting it for others.
Set Your OneDrive Policy Before Users Do
CinchOps configures KFM and OneDrive policy across your fleet - block, controlled opt-in, or personal-sync lockout - so backups happen on your terms, not by prompt.
Talk to CinchOpsThe right time to set your KFM policy is before the prompt shows up - not after half your staff have already opted in. Decide block, controlled opt-in, or no personal sync, push it, and the nudge simply never appears.
Take Control of OneDrive Across Your Business
CinchOps assesses your Microsoft 365 configuration, deploys the right KFM and sync policies to every endpoint, and audits where your data lives - as part of everyday managed IT and cybersecurity.
Explore CinchOps managed IT →How CinchOps Helps Secure Your Business
CinchOps is a Katy, Texas managed IT services provider serving businesses across West Houston and the wider metro, keeping Microsoft 365 changes from becoming surprises.
- Configuration assessment. Reviewing your Microsoft 365 setup and recommending the right OneDrive and KFM policies.
- Policy deployment. Implementing Group Policy or Intune settings to control OneDrive usage across every device.
- User training. Teaching your team proper data-storage practices so prompts do not derail your standards.
- Usage auditing. Monitoring cloud-storage usage to keep your business compliant.
- Data governance. Building strategies that balance security with the usability your team needs.
Do not let a cloud-storage push catch your organization unprepared. Contact CinchOps to keep your data secure, compliant, and properly managed.
Frequently Asked Questions
What is OneDrive Known Folder Move (KFM)?
Known Folder Move redirects the Windows Desktop, Documents, and Pictures folders to OneDrive so their contents sync to the cloud automatically. It protects against data loss on a lost or failed device, but on business machines it should be enabled deliberately by IT rather than by an in-app prompt.
How do I block the OneDrive backup prompts?
Enable the Group Policy "Prevent users from moving their Windows known folders to OneDrive," which sets KFMBlockOptIn = 1 under HKLM\SOFTWARE\Policies\Microsoft\OneDrive. Where KFM is blocked, the backup prompt does not appear in Word, Excel, or PowerPoint at all.
What does KFMBlockOptIn do?
KFMBlockOptIn is the registry value set by the "Prevent users from moving their Windows known folders to OneDrive" policy. When set to 1, users cannot opt their known folders into OneDrive, giving IT full control over whether KFM is used.
Can I allow KFM but keep it under control?
Yes. Use the "Silently move Windows known folders to OneDrive" policy with your tenant ID, which sets KFMSilentOptIn. You can specify exactly which folders (Desktop, Documents, Pictures) are redirected, so adoption happens on your terms instead of by user prompt.
How do I stop staff backing up to personal OneDrive?
Enable "Prevent users from syncing personal OneDrive accounts," which sets DisablePersonalSync = 1 under HKCU\SOFTWARE\Policies\Microsoft\OneDrive. Microsoft already blocks moving known folders to personal OneDrive on domain-joined PCs; this adds an extra compliance layer.
Discover More
Sources
