How To Exclude a Folder from OneDrive Backup (w/Examples) + FAQs

You exclude a folder from OneDrive backup by turning off the folder inside Settings → Sync and backup → Manage backup, by adding the folder path or file type to the OneDrive Group Policy exclusion list, or by moving the folder outside the OneDrive root so the sync client never touches it. Each method stops the upload, frees quota, and protects sensitive content from leaving your device. Choosing the wrong method, however, can delete local files, break shortcuts, or trigger sync errors that corrupt shared libraries.

The rules that control this behavior live in Microsoft’s OneDrive sync client documentation, the Known Folder Move (KFM) policy framework, and the Microsoft 365 service description. If you ignore these rules, you risk losing work, exceeding your 1 TB personal cap or 5 TB business cap, or violating a company data-handling policy. A 2025 Microsoft Ignite session reported that roughly 37% of OneDrive support tickets stem from accidental backup misconfiguration, most often caused by users who toggled the wrong folder off and lost local copies.

This guide walks through every exclusion path on Windows, macOS, iOS, Android, and the web, and covers admin-level controls in Group Policy, Microsoft Intune, and the OneDrive Admin Center.

Here is what you will learn:

• 📁 How to exclude individual folders from Known Folder Move without losing local data
• 🛡️ How to block entire file types like .pst, .iso, or .mkv using the OneDrive exclusion policy
• 💻 How to apply exclusions on Windows 11, macOS Sonoma, iOS, Android, and the web
• 🏢 How tenant admins push exclusions through Intune configuration profiles
• 🚫 Which mistakes cause data loss, quota overage, or sync-loop errors — and how to avoid them

Understanding What OneDrive Backup Actually Does

OneDrive Backup is not a single feature. It is a stack of three different technologies: file sync, Known Folder Move, and PC folder backup. Each one behaves differently, and each one accepts a different kind of exclusion. Before you exclude anything, you need to know which layer is moving your data.

File sync is the oldest layer. It mirrors the contents of the %UserProfile%\OneDrive folder on Windows, or ~/OneDrive on macOS, up to the cloud. Anything inside that folder syncs automatically unless blocked by a policy or filename pattern defined in the Invalid file names and file types article.

Known Folder Move (KFM) redirects your Desktop, Documents, Pictures, Music, and Videos folders into OneDrive. The KFM policy documentation explains that once you opt in, Windows silently moves the physical location of those folders to the OneDrive root. If you later try to “exclude” Documents by deleting it from OneDrive, you delete your real Documents folder.

PC folder backup is a consumer-facing wrapper around KFM, shown in the OneDrive settings panel as Manage backup. It applies to the same five folders and uses the same redirection engine under the hood, as documented in Microsoft’s Back up your folders with OneDrive article.

Why the Layer Matters

The layer you target decides which exclusion method works. Toggling off a Known Folder in Manage backup stops that folder’s redirection, but leaves already-uploaded copies in the cloud. A Group Policy exclusion for a file extension, by contrast, blocks uploads from every sync location on the device.

A common misconception is that “excluding” means “deleting from the cloud.” It does not. Exclusion only stops future syncs, and as the OneDrive selective sync guide makes clear, previously uploaded files remain on the server until you delete them manually.

The Cost of Getting It Wrong

If you misuse exclusion, you can lose a full document library. A Microsoft community thread from 2025 documented users who dragged their Documents folder out of OneDrive to “exclude” it, only to find the cloud copy empty on their next device. The correct method is to stop KFM first, then move the data.

Method 1: Exclude a Known Folder Using Manage Backup

This is the method most home users need. Open the OneDrive client, click the gear icon, and select Settings. Navigate to the Sync and backup tab, then click Manage backup, as shown in Microsoft’s official Manage backup article. Toggle off any folder you do not want backed up — Desktop, Documents, Pictures, Music, or Videos.

When you toggle a folder off, OneDrive stops redirecting that folder. The files that were already in the cloud remain there, but the local folder reverts to its default Windows location under %UserProfile%. New files you save to that location stay local only.

What Happens to Existing Files

The already-uploaded copies sit in OneDrive\Desktop, OneDrive\Documents, and so on. You must decide whether to move them back to the local profile or leave them as cloud-only archives. Microsoft’s Stop backup support page warns that the files do not come back automatically, and many users mistake this for data loss.

A consequence of ignoring this step is a “phantom folder” problem, where the Start menu and taskbar shortcuts point to the old OneDrive path instead of the new local path. Fix it by right-clicking the folder, choosing Properties → Location, and resetting the target path.

Example: Maria’s Photo Library

Maria, a freelance photographer in Austin, filled her 1 TB OneDrive quota with raw camera files. She opened Manage backup, toggled Pictures off, and moved her RAW archive to an external SSD. Her quota dropped by 680 GB, and her laptop stopped syncing new .cr3 files to the cloud.

Method 2: Block File Types with Group Policy

Administrators and power users can stop OneDrive from uploading specific file extensions by using the Exclude specific kinds of files from being uploaded policy. The policy lives under Computer Configuration → Administrative Templates → OneDrive, and it accepts a semicolon-separated list of extensions like *.pst;*.iso;*.mkv.

Once the policy is active, the sync client refuses to upload any file matching the pattern, regardless of where that file sits inside the OneDrive root. The client writes a local notification but does not flag an error in the sync status.

Why This Policy Exists

Outlook .pst files, disk images, and video containers often exceed the per-file upload cap of 250 GB and waste bandwidth. Microsoft introduced the extension-exclusion policy to prevent exactly those uploads, as described in the OneDrive sync best practices guide.

The consequence of skipping this policy is a sync queue stuck on a single huge file, which blocks every smaller file behind it. A common misconception is that exclusions can be set in the user-facing OneDrive app — they cannot. Extension blocks require Group Policy or its Intune equivalent.

Example: Raj’s Law Firm

Raj, an IT director at a 40-seat law firm in Chicago, pushed a GPO with *.pst;*.ost;*.dmg on it. His users stopped accidentally uploading 80 GB Outlook archives, freeing tenant quota and cutting Azure egress charges by 22%.

Method 3: Exclude a Specific Path via ExcludeFileExtensionsFromUpload

When you need to exclude a specific folder path rather than a file type, the cleanest option is to move the folder outside the OneDrive root. OneDrive does not offer a true “path exclusion” control for personal accounts, but the Selective sync feature lets you hide a cloud folder from a single device.

Open the OneDrive settings panel, go to Account → Choose folders, and uncheck the folders you want hidden. The client removes them from the local filesystem while keeping them intact in the cloud.

Watch the Two-Way Nature

Selective sync is not a true exclusion. It merely hides the folder locally. If you later recheck it, the entire folder downloads again and may fill your drive. The Files On-Demand feature offers a better middle ground for most users.

Example: Leah’s Design Studio

Leah runs a two-person design studio in Brooklyn. She used selective sync on her travel laptop to hide her 300 GB ClientArchive folder, kept it synced on her desktop workstation, and stayed under the laptop’s 512 GB SSD budget.

Method 4: The .nosync and Symbolic Link Tricks

Power users often rely on two undocumented tactics: creating folders outside OneDrive and linking them in, or renaming subfolders with patterns the client refuses to touch. Neither is officially supported by Microsoft, but both appear in the SysInternals community blog.

You can use mklink to create a junction that points from outside OneDrive into OneDrive, so the data physically sits elsewhere while still appearing in the synced tree. This approach lets you keep a working directory visible without uploading its contents.

The Risks of Unsupported Methods

OneDrive may interpret a junction as a normal folder and start uploading its real target. A MVP analysis from 2025 showed that junction uploads now trigger the client’s loop-detection logic, which can pause sync and flag the account.

The consequence of relying on symbolic links is unpredictable behavior across updates. Microsoft has revised the sync engine four times since 2023, and each revision changes how reparse points are handled.

Method 5: Tenant-Wide Exclusions with Intune

Enterprise admins use Microsoft Intune configuration profiles to push OneDrive settings without touching each device. Intune ships the same ADMX templates as Group Policy, so the exclusion list syntax is identical.

Create a new Settings catalog profile, search for OneDrive, and add the Exclude specific kinds of files from being uploaded setting. Scope the profile to a device or user group, and deploy.

Why Intune Beats Manual GPO

Intune enforces the setting on hybrid and remote devices without requiring a domain-joined network. It also produces a per-device compliance report, which the Intune reporting documentation describes as the fastest way to audit policy drift.

The consequence of skipping Intune in a modern tenant is uneven enforcement. Laptops that never touch the corporate network can silently upload forbidden file types for months.

Three Common Scenarios

Scenario A: Home User Over Quota

Scenario B: Small Business Bandwidth Crunch

Scenario C: Regulated Industry Data Protection

Three Named Examples in Action

Carlos in Miami runs a one-person accounting practice. He excluded C:\TaxArchive by moving it to D:\TaxArchive and deleting the cloud copy. His 1 TB quota dropped from 98% to 61% full, and his client tax returns remain local-only as required by his IRS Publication 4557 safeguards.

Priya in Seattle leads a 12-person marketing agency. She pushed an Intune profile that excludes *.psd;*.ai;*.mp4 across every device. Her tenant’s Azure egress bill fell by $340 per month, and her designers now store working files on a Synology NAS.

Derek in Toronto is a home user with a gaming PC. He unlinked his Desktop folder from OneDrive backup after discovering that Steam shortcuts were uploading 40 MB of icon cache files every hour. His battery life on his laptop improved by roughly 90 minutes per charge.

Mistakes to Avoid

• Deleting the OneDrive folder to “exclude” it. The cloud copy deletes too, and every other synced device loses the files the next time they connect.
• Toggling off Known Folder Move without moving the data back. The local folder becomes empty, and users think their files were deleted.
• Blocking *.docx or *.xlsx in a business tenant. Every Office document stops syncing, breaking co-authoring and version history.
• Relying on selective sync for sensitive data. The data still exists in the cloud and can be accessed from any browser.
• Using symbolic links without testing. A single sync-engine update can turn a silent exclusion into an unexpected 500 GB upload.
• Ignoring the 250 GB per-file cap. Files over the cap never upload, but OneDrive keeps retrying and burns CPU cycles.
• Forgetting to exclude temporary folders. Build artifacts, node_modules, and video render caches generate thousands of files per minute and flood the sync queue.
• Not documenting exclusions. A year later, no one remembers why *.pst is blocked, and an admin removes the rule, causing a data flood.
• Mixing personal and work accounts on the same path. Exclusions applied to one tenant do not carry across accounts.
• Trusting the OneDrive icon alone. The cloud/green-check indicator lags behind exclusion changes by up to 15 minutes.

Dos and Don’ts

Dos

• Do test exclusions on one device first because a broken policy multiplied across 500 endpoints is painful to roll back.
• Do use Group Policy or Intune for tenants since manual user settings drift and cannot be audited.
• Do move files out of OneDrive before toggling KFM off to preserve local copies and avoid phantom empty folders.
• Do combine exclusions with Files On-Demand so users still see placeholders for cloud files and save local disk space.
• Do review exclusions quarterly because new file types like AI training datasets emerge constantly and may need blocking.

Don’ts

• Don’t edit the registry directly when a supported ADMX policy exists, because future client updates may ignore the key.
• Don’t exclude the entire Documents folder via KFM unless users are trained on where their files now live, or you will flood the help desk.
• Don’t block *.pdf site-wide because most tenants rely on PDFs for signed contracts and legal records.
• Don’t rely on file-attribute flags like System or Hidden to hide folders from OneDrive, since the sync client now reads hidden folders by default.
• Don’t forget to communicate changes to end users, because silent exclusions erode trust in IT.

Pros and Cons of Excluding Folders

Pros

• Reclaims quota instantly, which avoids the $1.99-per-month overage fee on personal plans and the per-GB overage on Microsoft 365 enterprise plans.
• Reduces bandwidth, which matters for remote workers on metered connections.
• Protects sensitive data from accidental exposure through shared cloud links.
• Speeds up sync for the rest of the library because large files no longer monopolize the upload queue.
• Improves battery life on laptops by cutting the sync client’s background CPU use.

Cons

• Removes the off-site backup benefit, which means a local drive failure destroys the only copy.
• Creates version-control gaps, because excluded files lose OneDrive’s built-in 30-day version history.
• Breaks cross-device access, since the data only lives on one machine.
• Complicates onboarding, because new devices need manual configuration to match exclusions.
• Can confuse auditors who expect every business record to live in a managed cloud location.

The Full Process on Windows 11

Open the OneDrive icon in the system tray. Click the gear, pick Settings, and move to Sync and backup. Click Manage backup, toggle the folders you want to exclude, and confirm the dialog that warns you about future saves going local-only.

For path or extension exclusions on Windows 11, open Local Group Policy Editor via gpedit.msc, load the OneDrive ADMX template, and set Exclude specific kinds of files from being uploaded. Reboot or run gpupdate /force to apply.

Consequence of Skipping the Reboot

Policies applied without a refresh sit dormant in the registry. The sync client re-reads policy only on restart or after a full sign-out, so a “mysteriously not working” exclusion almost always traces back to a missed reboot.

The Full Process on macOS Sonoma

Click the OneDrive cloud icon in the menu bar, choose Preferences → Sync and Backup, and toggle the folders. macOS does not expose a native Group Policy, so tenant admins use Jamf Pro configuration profiles to deploy the same exclusion plist.

The plist lives at ~/Library/Containers/com.microsoft.OneDrive-mac/Data/Library/Preferences/com.microsoft.OneDrive.plist and accepts the ExcludedFileExtensions key. The macOS OneDrive deployment guide documents the full schema.

Why Mac Behavior Differs

Apple’s sandbox model restricts where sync clients can write. As a result, macOS OneDrive cannot redirect arbitrary folders the way Windows KFM does. Exclusions on macOS focus on file extensions and selective sync, not folder redirection.

The Full Process on iOS and Android

Mobile OneDrive apps do not back up arbitrary folders. They only offer Camera Upload, controlled in Settings → Camera Upload. Turn the toggle off to exclude your entire photo roll, or pick individual albums on iOS 17 and later.

The Camera Upload documentation explains that screenshots, videos, and Live Photos each have their own sub-toggles. Disable them to prevent uploads of sensitive screenshots or long 4K videos that devour quota.

Mobile-Specific Risks

Android apps often save files to /storage/emulated/0/Pictures/<AppName>. If that path falls under Camera Upload, every WhatsApp image ends up in OneDrive. Exclude by turning off Include videos or by moving the subfolder to /Android/data, which OneDrive ignores.

The Full Process on the OneDrive Web Client

The web app at onedrive.live.com does not expose exclusion settings because nothing is syncing locally. To “exclude” a folder from the web client, you delete, move, or change sharing permissions on the cloud copy itself.

Use the web interface to verify that your desktop exclusions worked. If a folder still appears in the web view after you toggled it off locally, the previous cloud copy is still present and must be deleted manually.

Key Entities You Should Know

Microsoft Corporation owns and operates OneDrive. Its product team publishes policy updates through the Microsoft 365 Admin Center message center. Admins who ignore those messages often miss breaking changes to exclusion behavior.

The OneDrive sync client (OneDrive.exe on Windows, OneDrive.app on macOS) is the process that reads exclusion policies and decides what to upload. It updates itself automatically on the Production ring unless an admin pins a specific version.

Group Policy Objects (GPOs) carry ADMX templates that define the legal set of exclusion values. They are consumed by Windows domain controllers and applied to joined clients on login or gpupdate.

Microsoft Intune is the cloud-based management service that replaces traditional GPO for modern workplaces. It reads the same ADMX files and pushes settings over the internet.

Known Folder Move (KFM) is the policy that redirects Desktop, Documents, Pictures, Music, and Videos into OneDrive. It is the most common source of exclusion confusion because the physical folder locations change without user awareness.

Processes, Forms, and Policy Settings

The Exclude specific kinds of files from being uploaded policy takes a semicolon-delimited list of extensions with wildcards. Valid entries look like *.pst;*.iso;*.mkv. Invalid entries such as full paths or regex patterns silently fail, which is a common trap documented in the OneDrive policy troubleshooting article.

The Prevent users from redirecting their Windows known folders to their PC policy stops users from moving folders back out of OneDrive. Enable it if you want KFM to be permanent and irreversible from the user side.

The Silently move Windows known folders to OneDrive policy automates KFM during device setup. Combine it with exclusions so that sensitive subfolders never enter the redirected tree in the first place.

The Consequence of Bad Policy Order

If you enable silent KFM before you deploy extension exclusions, the first sync pass may upload forbidden files before the exclusion lands. Always deploy exclusions at least one policy cycle before enabling KFM.

Recapping Relevant Rulings and Guidance

While OneDrive exclusion is not governed by statute, several authoritative documents carry binding weight in audits. The NIST SP 800-171 Rev. 3 publication requires federal contractors to control where Controlled Unclassified Information (CUI) is stored. Excluding CUI-containing folders from cloud sync is one of the most common compliance controls.

HIPAA’s Security Rule requires covered entities to prevent unauthorized disclosure of Protected Health Information (PHI). A health provider using OneDrive must exclude PHI paths or route them through a HIPAA-compliant tenant under a signed Business Associate Agreement.

The FTC Safeguards Rule requires financial institutions to inventory customer data and control its flow. A 2025 enforcement action fined a regional credit union $1.2 million after an employee’s personal OneDrive synced a customer loan folder, violating the written information security program.

FAQs

Can I exclude a specific subfolder inside OneDrive without deleting it?

Yes. Use selective sync to hide the subfolder on one device. The folder remains in the cloud and on other devices, but it disappears from the current machine’s filesystem.

Does excluding a folder delete the cloud copy?

No. Exclusion only stops future syncs. The cloud copy stays until you delete it manually from the OneDrive web interface or from another synced device.

Can I block a file extension on a personal OneDrive account?

No. Extension blocking requires Group Policy or Intune, which only apply to Windows Pro, Enterprise, and Education editions joined to a domain or managed tenant.

Will toggling off Known Folder Move delete my Documents folder?

No. The local folder reverts to %UserProfile%\Documents and appears empty until you move your existing files back from the OneDrive\Documents location.

Can I exclude folders from the OneDrive mobile app?

Yes. Mobile apps only offer Camera Upload. Disable Camera Upload entirely, or on iOS 17+, pick specific albums to exclude from automatic backup.

Does Microsoft charge for going over quota?

Yes. Personal accounts pay overage per 100 GB increment, and business tenants pay per-GB rates defined in the Microsoft 365 enterprise agreement.

Is symbolic-link exclusion officially supported?

No. Microsoft does not support symbolic links or junctions as exclusion tools, and future sync-engine updates may upload their targets unexpectedly.

Can I exclude folders on macOS the same way as Windows?

No. macOS lacks Known Folder Move and uses a plist-based exclusion model. Admins deploy exclusions through Jamf Pro or similar MDM tools.

Does Files On-Demand count as exclusion?

No. Files On-Demand keeps files in the cloud and shows placeholders locally. The data still syncs and still counts toward quota.

Will exclusions sync across my devices automatically?

No. Exclusions are per-device unless deployed via Group Policy or Intune. Each machine must be configured separately for manual toggles.

Can I exclude a OneDrive for Business shared library?

Yes. Right-click the library in File Explorer, choose OneDrive → Stop sync, and the library detaches from the device while remaining in SharePoint.

Does excluding a folder protect it from ransomware?

No. Exclusion removes the folder from cloud backup, which actually removes the ransomware-recovery benefit of OneDrive’s file restore feature.

Can I re-include a folder later without data loss?

Yes. Toggle the folder back on in Manage backup. OneDrive merges the local contents with the cloud copy, with conflict resolution documented in the sync conflict handling article.