Close Menu
Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Facebook X (Twitter) Instagram
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    • Home
    • Intune
    • Windows
      • Modern Workplace
    • macOS
    • Android
    • iOS
    • Automation
      • Logic Apps
      • Intune Monitoring
      • GitHub
    • Security
      • Passwordless
      • Security
    • Speaking
    • About me
    Peter Klapwijk – In The Cloud 24-7Peter Klapwijk – In The Cloud 24-7
    Home»Intune»Stop shortcut files from syncing to OneDrive
    Intune

    Stop shortcut files from syncing to OneDrive

    Peter KlapwijkBy Peter KlapwijkMay 13, 2021Updated:May 13, 202152 Mins Read

    I find it pretty annoying applications which place a shortcut on my computer’s desktop. And when these shortcuts are not placed on the public desktop, but even on my own desktop, these shortcuts are synced to my OneDrive. Especially when I’m working on several computers with the same software (like Microsoft Teams), after a while I have several shortcuts on my desktop (from the same software).

    I’m glad that we can avoid syncing these shortcut files (and other files and file types) since the beginning of this year, by using Microsoft Intune (and also via GPO).

    So today a short article to show this fantastic setting 🙂

    The setting only blocks syncing new shortcut files, existing files won’t be removed from OneDrive.

    Create an Administrative Templates profile

    I use an Administrative Templates profile to configure this setting, but because of the developments around Settings Catalog, in the future I expect this setting to (also) become available there.

    • Sign-in to the Endpoint Manager admin center
    • Browse to Devices – Windows – Configuration profiles
    • Click Create Profile
    • Choose Windows 10 and later as Platform
    • Choose Templates as Profile type
    • Select Administrative Templates
    • Click Create
    • Give the profile a Name
    • Enter a Description (Optional)
    • Click Next
    • Select the OneDrive folder and search for Exclude
    • Select Exclude specific kinds of files from being uploaded
    • Select Enabled
    • Enter *.lnk and *.url in the text boxes
    • Click OK
    • Finish creating the profile and assign the profile to the preferred group

    The end-result

    The end-result is pretty simple, the shortcuts (on my desktops) aren’t synced anymore to OneDrive!

    Thanks for reading!

    Administrative Templates Intune macOS MEM Microsoft Endpoint Manager OneDrive OneDrive for Business Windows Windows 10
    Share. Facebook Twitter LinkedIn Email WhatsApp
    Peter Klapwijk
    • Website
    • X (Twitter)
    • LinkedIn

    Peter is a Security (Intune) MVP since 2020 and is working as Modern Workplace Engineer at Wortell in The Netherlands. He has more than 15 years of experience in IT, with a strong focus on Microsoft technologies like Microsoft Intune, Windows, and (low-code) automation.

    Related Posts

    How to update win32 applications with Microsoft Intune

    June 8, 2020

    Fully cloud based print management with Printix [UPDATED]

    February 16, 2018

    Improved sharing UI for OneDrive and SharePoint [UPDATED]

    June 20, 2017
    View 5 Comments

    5 Comments

    1. Michaël VdS on June 17, 2021 13:35

      Thanks a lot for another great article.
      In the past I tried to achieve this with a PS script but it didn’t really work as I hoped.
      How does this setting differ from the setting Sharepoint Admin -> sync?

      Reply
      • Peter Klapwijk on June 17, 2021 19:02

        I don’t know on what level the setting is forced via SharePoint admin, but the big difference seems that setting is tenant wide and via policy (GPO or Intune), it’s not. You can target a group of choice.

        Reply
        • Michaël Van den Steen on June 18, 2021 10:00

          Good point, thanks!

          Reply
    2. Martin Søgstad on November 18, 2021 15:26

      I applied these settings just now.
      It works like a charm for new shortcuts, but it doesn’t stop the sync off already synced shortcuts.
      FYI.

      Reply
    3. Mark on July 8, 2022 05:52

      This does not work for us and I cannot figure out why. Using the latest OneDrive client, Windows 10 or 11, Intune policy exactly as shown; shortcuts still sync even with a new profile.

      Reply
    Leave A Reply Cancel Reply

    Peter Klapwijk

    Hi! Welcome to my blog post.
    I hope you enjoy reading my articles.

    Hit the About Me button to get in contact with me or leave a comment.

    Awards
    Sponsor
    Latest Posts

    Create deployment ring groups for Microsoft Intune

    June 27, 2025

    Update Windows Defender during Windows Autopilot enrollments

    May 16, 2025

    Hide the “Turn on an ad privacy feature” pop-up in Chrome with Microsoft Intune

    April 19, 2025

    How to set Google as default search provider with Microsoft Intune

    April 18, 2025
    follow me
    • Twitter 4.8K
    • LinkedIn 6.1K
    • YouTube
    • Bluesky 1.5K
    Tags
    Administrative Templates Android Automation Autopilot Azure Azure AD Browser Conditional Access Edge EMS Exchange Online Feitian FIDO2 Flow Google Chrome Graph Graph API Identity Management Intune Intune Monitoring iOS KIOSK Logic Apps macOS MEM MEMMonitoring Microsoft 365 Microsoft Edge Microsoft Endpoint Manager Modern Workplace Office 365 OneDrive for Business Outlook Passwordless PowerApps Power Automate Security SharePoint Online Teams Windows Windows 10 Windows10 Windows 11 Windows Autopilot Windows Update
    Copy right

    This information is provided “AS IS” with no warranties, confers no rights and is not supported by the authors, or In The Cloud 24-7.

     

    Copyright © 2025 by In The Cloud 24-7/ Peter Klapwijk. All rights reserved, No part of the information on this web site may be reproduced or posted in any form or by any means without the prior written permission of the publisher.

    Shorthand; Don’t pass off my work as yours, it’s not nice.

    Recent Comments
    • Parth Savjadiya on Using Visual Studio with Microsoft Endpoint Privilege Management, some notes
    • Chris Johnson on Assign Deny Local Log On user right to an (Azure) AD group by using Microsoft Intune
    • Northernsky on Automatically wipe a Windows 10 device after a number of authentication failures
    • Henrik on Intune Driver update for Windows – Get applicable devices
    • Adam on Get notified on expiring Azure App Registration client secrets
    most popular

    Application installation issues; Download pending

    October 1, 2024

    Restrict which users can logon into a Windows 10 device with Microsoft Intune

    April 11, 2020

    How to change the Windows 11 language with Intune

    November 11, 2022

    Update Microsoft Edge during Windows Autopilot enrollments

    July 9, 2024
    Peter Klapwijk – In The Cloud 24-7
    X (Twitter) LinkedIn YouTube RSS Bluesky
    © 2025 ThemeSphere. Designed by ThemeSphere.

    Type above and press Enter to search. Press Esc to cancel.

    Manage Cookie Consent
    To provide the best experiences, we use technologies like cookies to store and/or access device information. Consenting to these technologies will allow us to process data such as browsing behavior or unique IDs on this site. Not consenting or withdrawing consent, may adversely affect certain features and functions.
    Functional Always active
    The technical storage or access is strictly necessary for the legitimate purpose of enabling the use of a specific service explicitly requested by the subscriber or user, or for the sole purpose of carrying out the transmission of a communication over an electronic communications network.
    Preferences
    The technical storage or access is necessary for the legitimate purpose of storing preferences that are not requested by the subscriber or user.
    Statistics
    The technical storage or access that is used exclusively for statistical purposes. The technical storage or access that is used exclusively for anonymous statistical purposes. Without a subpoena, voluntary compliance on the part of your Internet Service Provider, or additional records from a third party, information stored or retrieved for this purpose alone cannot usually be used to identify you.
    Marketing
    The technical storage or access is required to create user profiles to send advertising, or to track the user on a website or across several websites for similar marketing purposes.
    Manage options Manage services Manage {vendor_count} vendors Read more about these purposes
    View preferences
    {title} {title} {title}