Others

How to Exclude OneDrive from a VPN with Split Tunneling

Camila Milosovich Oct 14, 2026 868 views

Question details

The user needs to configure their VPN split tunneling to correctly bypass Microsoft OneDrive traffic.

How to Exclude OneDrive from a VPN with Split Tunneling

Product: OneDrive
Device & OS: not provided
Scenario: Attempting to exclude OneDrive from a VPN connection using application-based split tunneling.
Observed behavior: Adding OneDrive executable files to the VPN split-tunneling list fails to bypass the VPN because OneDrive utilizes multiple background processes and Microsoft 365 endpoints.

Before you start

Verify that your VPN provider supports split tunneling by IP address or destination domain, and ensure you have administrative access to modify your VPN settings.

Solution 1Recommended

Configure Split Tunneling by Destination Domains or IP Ranges

Routing traffic based on specific Microsoft 365 domains and IPs ensures all OneDrive background services are excluded from the VPN.

Because OneDrive relies on a variety of background services and Microsoft endpoints, excluding a single application executable (.exe) is usually insufficient. Advanced VPN configurations allow you to bypass traffic based on the actual network destination.

Open Advanced VPN Settings

Launch your VPN client and navigate to the settings menu. Look for options labeled 'Split Tunneling', 'Advanced Routing', or 'Whitelisting'.

Switch to IP/Domain Exclusion

Change the split tunneling method from 'Application-based' to 'Domain/IP-based' exclusion if your client supports it.

Add Microsoft 365 Endpoints

Input the official Microsoft 365 and OneDrive destination domains or IP address ranges into the exclusion list. You can find these updated ranges in the official Microsoft Endpoint documentation.

Save and Restart

Save your new routing rules, disconnect from the VPN, and reconnect to ensure the updated policies take effect.

Configure Split Tunneling by Destination Domains or IP Ranges

Check VPN Documentation: If you cannot find domain or IP-based split tunneling options, consult your VPN provider's manual, as some clients only offer application-level exclusions by default.

Solution 2

Seek Vendor Support and Microsoft Q&A Assistance

If standard configurations fail, reach out to specialized support channels for advanced networking troubleshooting.

Free Microsoft Office alternative

Try WPS Office for Seamless Cloud Integration

If you are struggling with complex Microsoft networking and syncing issues, consider switching to WPS Office. It provides an excellent, free alternative to Microsoft Office with its own hassle-free cloud syncing.

1. Download WPS Office: Visit the official WPS website to download the free installation package for your operating system.
2. Install and Sign In: Run the installer, open the application, and create a free account to activate your built-in WPS Cloud storage.
3. Open Your Files: Drag and drop your existing Microsoft Office documents into WPS to begin editing immediately with full compatibility.

Fully compatible with Microsoft Office formats like Word, Excel, and PowerPoint.Built-in WPS Cloud storage eliminates complex third-party syncing issues.Lightweight software that runs smoothly on almost any device.Familiar and intuitive user interface makes transitioning effortless.

microsoft office alternative - wps office

Frequently Asked Questions

Why does excluding the OneDrive executable from my VPN fail to work?

OneDrive uses multiple background processes and connects to various Microsoft 365 endpoints. Excluding just the main executable file misses these background network services, meaning much of the traffic is still routed through the VPN.

Where can I find the IP addresses and domains for OneDrive?

Microsoft regularly updates the list of necessary URLs and IP address ranges for Microsoft 365 and OneDrive. You can find the complete, up-to-date list by searching for 'Microsoft 365 URLs and IP address ranges' in Microsoft's official documentation.

Does every VPN client support split tunneling by IP or domain?

No. While many enterprise and advanced consumer VPNs support IP or domain-based split tunneling, some basic VPN clients only allow you to exclude specific applications. Check your VPN's feature list or contact their support team for confirmation.

Office Quick Solutions