OpenIntuneBaseline icon indicating copy to clipboard operation
OpenIntuneBaseline copied to clipboard

OneDrive Context Menu missing after applying OIB

Open cwit-ah opened this issue 1 year ago • 27 comments

Hi there, we are using the OIB for our tenants and we noticed that after applying all baselines we start missing the OneDrive context menu, it just shows "Always keep on this device" and "Free up space" but the OneDrive menu with its submenus is missing. This does not happen to tenants without the OIB applied. Are there any issues known with this? We tried everything available online but it's not coming back unfortunately.

Great work btw. we really appreciate it.

cwit-ah avatar Sep 16 '24 08:09 cwit-ah

Huh. How interesting. Confirmed the behaviour on a device with no OneDrive policies applied. Testing required to identify which setting(s) are causing the OneDrive context menu to disappear. image

SkipToTheEndpoint avatar Sep 16 '24 09:09 SkipToTheEndpoint

Tested applying both Device and User OIB policies to a pre-built VM that had no policy applied and L1 context menu visible. Policies all applied correctly and L1 menu visible through multiple reboots.

Left policies applied and triggered Intune wipe on VM and re-ran it through Autopilot. Once at the desktop, all policies applied and L1 menu not visible.

It's worth noting all of those options are visible in the L2 (Show more options) menu: image

I can only assume this is to do with something that happens with policies applied as the client initiates. Trying one more test with the Device policy applied to a user group to see if same behaviour exists.

SkipToTheEndpoint avatar Sep 16 '24 10:09 SkipToTheEndpoint

Options are not visible from the L2 in our case, they pretty much don't exist after applying the baseline. Also happens for either OneDrive per User install oder OneDrive per Machine install.

cwit-ah avatar Sep 16 '24 11:09 cwit-ah

@cwit-az OneDrive is pre-installed on the OS. It could be whatever way you're essentially re-installing the sync client is causing all menus to disappear. I wouldn't recommend deploying OneDrive as a separate install.

SkipToTheEndpoint avatar Sep 16 '24 11:09 SkipToTheEndpoint

@SkipToTheEndpoint We thought so too and have since then removed the OneDrive /allusers setup, still the same problem. Tested just now with an Autopilot Device reset through "Fresh Start", no OneDrive installation occurs on our part, still no context menu after applying the OIB.

cwit-ah avatar Sep 16 '24 12:09 cwit-ah

A Fresh Start isn't the same as a Wipe (essentially reinstall from media). Could you either try a Wipe or building something directly from a Win11 ISO. Either way, while I've been able to confirm that for whatever reason the L1 menu options disappear, the L2 ones shouldn't, and this is likely something to do with the OneDrive client's ability to be both Corp and Consumer I don't think this is an OIB-specific bug, rather one to do with policy control of the OneDrive client.

SkipToTheEndpoint avatar Sep 16 '24 13:09 SkipToTheEndpoint

Thank you for your troubleshooting so far. We have now tried "Wipe" from Intune and also deployed a fresh Win11 ISO, still no context menu in either L1 or L2 after policies are applied. We will now try and exclude the machine from every policy and then see if the context menu appears again. As a note: We don't deploy anything else besides OIB and some Edge Search Engine policy, additionally Windows Autopatch is deployed, but we don't think this should hinder context menus appearing but who knows. Also on Windows Enterprise for what it's worth. Will report back if we find out what's happening.

Microsoft Support so far also has no clue what's happening and has been suggesting to activate "Show OneDrive context menus" in the Settings Catalog which I believe simply doesn't exist, so probably a long time until we get an engineer that actually wants to look at the problem.

cwit-ah avatar Sep 17 '24 06:09 cwit-ah

Hey there.

So I did some additional testing and was able to confirm the behaviour regardless of whether the policies are deployed to users or devices.

Only thing I can say is that I'm like 95% certain this hasn't always been the case because I've definitely used those context menus before, which maybe leads me to think that a recent change in the sync client might be causing it if certain policies are being deployed.

Testing adding individual settings in one-by-one is obviously quite time consuming given you essentially need to rebuild a device, but I'll see what I can try and do.

It's certainly a weird one.

SkipToTheEndpoint avatar Sep 17 '24 07:09 SkipToTheEndpoint

Hi,

We are having the same issue with no context menu in File Explorer. When searching on this issue i saw this article from Microsoft https://support.microsoft.com/en-us/office/how-to-change-the-user-account-control-policies-to-allow-onedrive-context-menus-1f957672-848d-48bb-bfe8-5af828613211

Tried to built a new policy with those settings but no succes for us.

royhendriks91 avatar Sep 18 '24 10:09 royhendriks91

Yep I posted on X yesterday and it's not specific to the OIB policies, but linked to some other Local Security Options settings. I also tested changing those but it didn't resolve it either. Even then the changes required I wouldn't be comfortable merging into the OIB as it's a reduction in security doing so.

Honestly I'm going to have to mark this a "won't fix" and make a note of it in the Known Issues doc. The "Share" option in the L1 right-click menu still functions in exactly the same way and brings up the OneDrive share window which also allows you to get to the Manage Access options: image

So not all functionality is lost.

SkipToTheEndpoint avatar Sep 18 '24 16:09 SkipToTheEndpoint

I am in the same boat, I can share and offload local files to the cloud but missing version history and view online which are useful to have. This is missing from L1 and L2. Did you do anything in particular to get the full options in L2?

ak47uk avatar Sep 18 '24 17:09 ak47uk

@ak47uk No, and after testing (with exactly the same config and VM I might add), even that seems entirely inconsistent. Sometimes it's there, sometimes it's not...

SkipToTheEndpoint avatar Sep 19 '24 08:09 SkipToTheEndpoint

@ak47uk No, and after testing (with exactly the same config and VM I might add), even that seems entirely inconsistent. Sometimes it's there, sometimes it's not...

How annoying, hopefully this is something MS can address!

ak47uk avatar Sep 19 '24 11:09 ak47uk

FYI, this seems to not occur on a Win 10 device.

However, on my daily driver Win11 device, I actually lost the L1 and L2 menu options some months ago - along with the sync status icons - but the sync process itself, Files On Demand, etc. are all functioning fine.

I have a couple of customers with a similar issue - I suspect it was an update released sometime in the May/June timeframe - but have been unable to pinpoint which one.

ee61re avatar Sep 25 '24 09:09 ee61re

Thanks @ee61re

Behaviour has absolutely changed, but whether it was a Windows update that broke it or a OneDrive sync client update, I imagine we'll never get to the bottom of.

I've been able to get it to come back by not applying any of the OneDrive policies, but only at the point the device goes through Autopilot, not retroactively, which means it's nothing to do with the UAC or Local Security Policy settings. I'll see if I can get any traction in channels I have available but still leaving this as "wontfix", cos I didn't break it 😂

SkipToTheEndpoint avatar Sep 25 '24 10:09 SkipToTheEndpoint

I can confirm that during initial testing of OIB policies my Win 11 desktiop lost all OneDrive l1 and L2 context menus options but my laptop (also Win 11) retained them. When we rolled out OIB to all devices I then lost them on the laptop as well. I have not tried any resets on devices.

rmcbarnet avatar Sep 30 '24 11:09 rmcbarnet

I’m currently troubleshooting this and I believe it is due to “MSI Always Install With Elevated Privileges“ and “ MSI Always Install With Elevated Privileges (User)” in the Microsoft store configuration policies causing UAC issues.

Initial testing of deleting ‘AlwaysInstallElevated’ from the below registry paths has restored the Onedrive context menu after restarting.

HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

On a machine with Onedrive installed in user context I also had to reinstall Onedrive machine wide using the /allusers flag

dodorisio avatar Mar 05 '25 16:03 dodorisio

Just a quick FYI on this issue. I've been testing the problem with a new 365 tenant and found that if I do not apply the policy "Win - OIB - SC - Microsoft Store - D - Configuration - v3.4" to my laptops the right click context menu appears. This is working to both new AP devices and exisiting configured devices. Once the menu has appeared you can enable the setting again and the menu will remain visible. Tried testing on a setting by setting basis and it didn't resolve, but needs more testing. Thought I'd share what I have found so far...

joelyb123 avatar Jun 02 '25 15:06 joelyb123

Just a quick FYI on this issue. I've been testing the problem with a new 365 tenant and found that if I do not apply the policy "Win - OIB - SC - Microsoft Store - D - Configuration - v3.4" to my laptops the right click context menu appears. This is working to both new AP devices and exisiting configured devices. Once the menu has appeared you can enable the setting again and the menu will remain visible. Tried testing on a setting by setting basis and it didn't resolve, but needs more testing. Thought I'd share what I have found so far...

Specifically I found that setting 'MSI Always Install With Elevated Privileges' to 'Disabled' in that configuration profile causes the issue.

FYI if you re-apply that setting, the next time Onedrive auto-updates the context menu will disappear again.

dodorisio avatar Jun 02 '25 23:06 dodorisio

Just a quick FYI on this issue. I've been testing the problem with a new 365 tenant and found that if I do not apply the policy "Win - OIB - SC - Microsoft Store - D - Configuration - v3.4" to my laptops the right click context menu appears. This is working to both new AP devices and exisiting configured devices. Once the menu has appeared you can enable the setting again and the menu will remain visible. Tried testing on a setting by setting basis and it didn't resolve, but needs more testing. Thought I'd share what I have found so far...

Specifically I found that setting 'MSI Always Install With Elevated Privileges' to 'Disabled' in that configuration profile causes the issue.

FYI if you re-apply that setting, the next time Onedrive auto-updates the context menu will disappear again.

@dodorisio Thanks for the heads up, will have to watch out for that one.

joelyb123 avatar Jun 03 '25 07:06 joelyb123

Thanks for the time spent isolating the issue and posting about it. The issue is that is an important setting to protect against privilege escalation. I have Applocker in place so an attacker should not be able to run a crafted MSI to create admin creds but what would be better is if MS could fix at source! https://www.tenable.com/audits/items/CIS_Microsoft_Windows_10_Enterprise_v3.0.0_L1.audit:0579e54650069622ac4fc5e965241d40

incedIT avatar Jun 03 '25 07:06 incedIT

I got this working by changing just 1 setting, incase this helps someone else: Win - OIB - SC - Microsoft Store - D - Configuration Allow All Trusted Apps from Explicit Deny to Not Configured (Default setting with not configured is Deny) https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#allowalltrustedapps

danb-au avatar Aug 01 '25 06:08 danb-au

I got this working by changing just 1 setting, incase this helps someone else: Win - OIB - SC - Microsoft Store - D - Configuration Allow All Trusted Apps from Explicit Deny to Not Configured (Default setting with not configured is Deny) https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#allowalltrustedapps

Thanks, I can confirm that by changing just this setting I have a Onedrive sub-menu back in the context menu.

incedIT avatar Aug 05 '25 17:08 incedIT

I got this working by changing just 1 setting, incase this helps someone else: Win - OIB - SC - Microsoft Store - D - Configuration Allow All Trusted Apps from Explicit Deny to Not Configured (Default setting with not configured is Deny) https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#allowalltrustedapps

Thanks, I can confirm that by changing just this setting I have a Onedrive sub-menu back in the context menu.

Same - and my status icons have all reappeared!

ee61re avatar Aug 08 '25 08:08 ee61re

I got this working by changing just 1 setting, incase this helps someone else: Win - OIB - SC - Microsoft Store - D - Configuration Allow All Trusted Apps from Explicit Deny to Not Configured (Default setting with not configured is Deny) https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-applicationmanagement#allowalltrustedapps

This is what I did to get it working a couple months ago but just last week the context menu has disappeared again.

This is where I found the solution initially: https://techcommunity.microsoft.com/discussions/OneDriveforBusiness/onedrive-context-menu-missing-on-windows-11/4374590

chuckd29 avatar Aug 13 '25 17:08 chuckd29

We are seeing similar issue on Windows 11 25H2 with latest CU, OneDrive right-click menu options are missing from File Explorer, it was working fine a few weeks ago.

I tried changing the following settings in the OIB:

  • Configuration Allow All Trusted Apps from Explicit Deny to Not Configured in Win - OIB - SC - Microsoft Store - D - Configuration
  • MSI Always Install With Elevated Privileges to not configured
  • MSI Always Install With Elevated Privileges (User) to not configured

Based on some of the comments, may need to wait for the client to self-update with these settings in place, for it to return; will report back my findings the next time there is an OD update.

Update: After rebooting, OD right click menu and Windows Explorer shell integration is back with the changes above.

c3rberus avatar Nov 08 '25 17:11 c3rberus

I was able to get my menu back just now following the solution here: https://learn.microsoft.com/en-us/answers/questions/5548428/missing-onedrive-context-menu-items-in-windows-exp

The OneDrive Key was missing from HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\

I added the key and then edit the Default REG_SZ with the CLSID posted: {A3B3D3B0-1B3C-4B3D-8B3C-3B3D3B3D3B3D}

Restarted explorer.exe and the menu was back.

chuckd29 avatar Nov 13 '25 21:11 chuckd29