How to Control Offline Files Sync on User Logoff with Intune Policy

Start by signing into the Microsoft Intune admin center with your administrative credentials. Navigate to the configuration profiles section where you'll create a new policy specifically for offline files management.

Open your browser and go to https://endpoint.microsoft.com. Once logged in, follow this navigation path:

Devices > Configuration > +Create > +New Policy

Select the following options:

• Platform: Windows 10 and later
• Profile Type: Administrative Templates

Click Create to proceed to the configuration wizard.

Set up the foundational details for your offline files synchronization policy. This information helps identify and manage the policy across your organization.

Fill in the following fields in the Basics tab:

Name: Offline Files Sync Control Policy
Description: Controls offline files synchronization behavior during user logoff to ensure data consistency for remote workers
Platform: Windows 10 and later

Click Next to proceed to the configuration settings. The name and description you choose here will appear in all policy reports and troubleshooting logs, so make them descriptive enough for other administrators to understand the policy's purpose.

Use the Settings Picker to find the specific offline files policy that controls synchronization behavior during user logoff. This is the core setting that determines how Windows handles offline file updates when users sign out.

In the Configuration settings tab, click Add settings to open the Settings Picker. Use the search functionality to locate the offline files policy:

Search term: "Offline Files"
Setting name: "Synchronize all offline files before logging off"

Select the checkbox next to this setting and click Add selected. The setting will now appear in your configuration profile with three possible states:

• Not configured: Uses Windows default behavior
• Enabled: Forces full synchronization during logoff
• Disabled: Performs only quick synchronization during logoff

Choose the appropriate synchronization behavior based on your organization's requirements for data consistency versus logoff speed. This decision impacts both user experience and data integrity.

Select one of the following configurations:

Option A: Enable Full Synchronization (Recommended for Critical Data)

Setting: Enabled
Behavior: Complete synchronization of all offline files
Logoff time: Increased (may take several minutes)
Data consistency: Maximum

Option B: Quick Synchronization (Recommended for Performance)

Setting: Disabled
Behavior: Quick synchronization only
Logoff time: Minimal
Data consistency: Good but not guaranteed latest updates

For most enterprise environments handling sensitive data, choose Enabled to ensure complete data synchronization. This guarantees that all offline files are fully updated with network versions before the user logs off.

Enhance your offline files configuration with additional registry-based settings that control cache size, encryption, and logging. These settings provide granular control over offline files behavior.

Create a separate Custom OMA-URI configuration profile for advanced settings. Navigate to:

Devices > Configuration > +Create > +New Policy
Platform: Windows 10 and later
Profile Type: Custom

Add the following OMA-URI settings:

<!-- Enable Offline Files Service -->
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/ADMX_OfflineFiles/Pol_Enabled
Data Type: String
Value: <enabled/>

<!-- Set Cache Size (2GB) -->
OMA-URI: ./Device/Vendor/MSFT/Registry/HKLM/SYSTEM/CurrentControlSet/Services/CSC/Parameters/CacheSize
Data Type: Integer
Value: 2048

<!-- Enable Encryption -->
OMA-URI: ./Device/Vendor/MSFT/Registry/HKLM/SYSTEM/CurrentControlSet/Services/CSC/Parameters/EncryptOfflineFiles
Data Type: Integer
Value: 1

Deploy your offline files synchronization policy to specific user or device groups based on your organizational structure and requirements. Proper targeting ensures the policy reaches the right users without affecting unnecessary systems.

In the Assignments tab, configure the following:

Include groups: Select target Azure AD groups
Exclude groups: Add any exception groups
Filter type: Device or User based on your requirements

Common assignment strategies:

• Remote Workers Group: Target users who frequently work offline
• Mobile Device Group: Target laptops and tablets that travel
• Department-Specific: Target specific departments with unique data requirements

Click Next and review all settings in the Review + create tab. Verify the policy name, settings configuration, and target assignments are correct.

Complete the policy deployment and establish monitoring to ensure successful application across your target devices. Proper monitoring helps identify issues early and validates policy effectiveness.

Click Create to deploy the policy. The policy will begin applying to target devices within the next sync cycle (typically 8 hours for device policies, or immediately if devices check in).

Monitor policy deployment using these Intune reports:

Navigate to: Devices > Monitor > Device configuration
Select: Your offline files policy
View: Device status and User status tabs

Check for common deployment statuses:

• Success: Policy applied correctly
• Error: Policy failed to apply (check error details)
• Conflict: Another policy is conflicting
• Not applicable: Device doesn't meet requirements

Force immediate policy sync on test devices using Company Portal or PowerShell:

Get-ScheduledTask | Where-Object {$_.TaskName -eq "PushLaunch"} | Start-ScheduledTask

Perform comprehensive testing to ensure the offline files synchronization policy works correctly in real-world scenarios. Testing validates both the technical implementation and user experience impact.

Execute these test scenarios on pilot devices:

Test 1: Logoff Synchronization Behavior

# Create test offline files
1. Map network drive: \\server\share
2. Make files available offline
3. Modify files while offline
4. Reconnect to network
5. Log off and monitor sync behavior

Test 2: Policy Enforcement Verification

# Check policy application
1. Open Sync Center (Control Panel > Sync Center)
2. Click "Manage offline files"
3. Verify "Sync all offline files when logging on" setting is grayed out
4. Confirm users cannot change the setting

Test 3: Performance Impact Assessment

Measure logoff times before and after policy implementation:

# PowerShell script to monitor logoff duration
$StartTime = Get-Date
# User logs off here
$EndTime = Get-Date
$Duration = $EndTime - $StartTime
Write-Output "Logoff duration: $($Duration.TotalSeconds) seconds"

Address typical problems that arise with offline files synchronization policies and implement optimizations to improve user experience and system performance.

Common Issue 1: Slow Logoff Times

If users experience excessively long logoff times with full synchronization enabled:

# Check offline files cache size and usage
fsutil behavior query DisableDeleteNotify
fsutil behavior set DisableDeleteNotify 0

# Monitor sync progress
Get-WmiObject -Class Win32_OfflineFilesCache | Select-Object *

Common Issue 2: Sync Conflicts

Resolve file conflicts that prevent successful synchronization:

# View sync conflicts
mobsync.exe /logon

# Reset offline files cache (last resort)
csccmd /enable
csccmd /resid

Common Issue 3: Policy Not Applying

Diagnose policy application failures:

# Check policy application status
Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\Extension-List\{827D319E-6EAC-11D2-A4EA-00C04F79F83A}"

# Force group policy refresh
gpupdate /force