Back to All Cheatsheet Libraries cheatsheets

Microsoft OneDrive

Sync modes, sharing, and version-history reference for Microsoft OneDrive.

OneDrive is a SharePoint site collection with a friendlier name

Every user's OneDrive is technically their own SharePoint site. That explains most of its behaviour — the same path limits, the same versioning, the same recycle bins, and crucially: when an account is deleted, the OneDrive goes with it. That's the single most important operational fact on this page.

Icon State What it means Uses disk?
☁️ Cloud outlineOnline-onlyVisible in Explorer/Finder but not downloaded. Opens on demand, which needs a connection.No
✅ Green tick, white fillLocally availableDownloaded because you opened it. Can be evicted automatically to reclaim space.Yes, temporarily
✅ Green tick, solid fillAlways keep on this devicePinned. Guaranteed available offline and never auto-evicted.Yes, permanently
🔄 Blue arrowsSyncingUpload or download in progress.
⛔ Red circleSync errorBlocked — usually a name conflict, invalid character, or permission problem. Click the tray icon for detail.
🔒 PadlockBlocked by policyA DLP or sensitivity-label rule is preventing sync of this item.
Files On-Demand — the setting worth understanding
  • On by default in current versions. Files appear locally but download only when opened, so a 2 TB OneDrive occupies almost no disk.
  • Right-click any file or folder → Always keep on this device to pin it for genuine offline use.
  • Right-click → Free up space converts local copies back to placeholders without deleting anything.
  • Storage Sense (Windows) can auto-evict files unopened for N days. Useful, but it surprises people who expected offline access on a flight.
  • Anyone working offline regularly should pin what they need before disconnecting. This is the most common "I couldn't work on the plane" cause.
Known Folder Move
  • Redirects Desktop, Documents, and Pictures into OneDrive so they're backed up without users changing habits.
  • Deployed by policy in most organisations. It's the single highest-value OneDrive feature for preventing data loss on a failed laptop.
  • Watch for users with enormous Desktop folders — the initial sync can be substantial and slow.
  • It does not cover other locations. Files elsewhere on the drive remain unprotected.
Add shortcut vs Sync
  • Add shortcut to OneDrive is the modern approach for shared libraries: it appears in your OneDrive, follows you across devices, and counts against the library's quota.
  • Sync is the legacy button. It creates a separate synced root, is device-specific, and is more prone to conflict.
  • Prefer shortcuts. If you inherit synced libraries, migrating them to shortcuts reduces support load noticeably.
Link type Who it works for When to use it
Anyone with the linkNo sign-in required. Forwardable and untrackable once sent.Genuinely public content only. Many tenants disable this entirely, and reasonably so.
People in your organisationAnyone signed in to your tenant.The sensible internal default.
People with existing accessGrants nothing new — just a link to where the file already is.Safest option for "here's that document" in a chat.
Specific peopleNamed individuals only, including verified external guests.External sharing where you need an audit trail.
Sharing controls worth setting
  • Expiration date — link stops working automatically. Essential for anything shared with a contractor or client.
  • Block download — recipients can view in the browser but not save a copy. Friction rather than true security, but it stops casual redistribution.
  • Password protect — available on Anyone links, and the minimum bar if you must use one.
  • Set the link type before copying. The dialog remembers the last setting used, which is how an internal file quietly gets an Anyone link.
  • Review what you've shared: OneDrive web → Shared → Shared by you. Most people find something surprising.
Share a link, not an attachment
  • Attachments fork immediately — five recipients means five diverging copies and no single source of truth.
  • A link keeps one file, with version history, revocable access, and no size limit.
  • Outlook offers to convert an attachment to a link automatically. Accept it.
  • The common failure: sharing a link to a file the recipient has no permission to. Outlook usually prompts to fix this — read that prompt rather than dismissing it.

Three layers of recovery, in the order to try them

OneDrive has genuinely good recovery, and most people don't know the second and third layers exist.

1

Version history — for "I broke this file"

Right-click → Version history. Works on any file type, not just Office documents — PDFs, images, archives, CAD files. Restore or download any prior version.

2

Recycle bin — for "I deleted this file"

Two stages: the standard bin (typically 93 days), then the second-stage bin. Items missing from the first are often still in the second, which users rarely check.

3

Restore your OneDrive — for "everything is wrong"

Settings gear → Restore your OneDrive. Rolls the entire OneDrive back to any point in the last 30 days, using an activity histogram to pick the moment.

This is the ransomware and mass-deletion recovery path, and the reason a synced OneDrive is meaningfully safer than a local folder. Worth knowing before you need it.

4

Admin recovery — for a deleted account

When a user is deleted, their OneDrive is retained for a configurable period (default 30 days, extendable). An admin can grant another user access or move the content before it's purged.

Set this up as part of offboarding, not as an emergency — see the Admin tab.

Offboarding — where OneDrive data is actually lost
  • Deleting a user account starts a retention countdown on their OneDrive (default 30 days). After that, the content is gone.
  • Before deleting: set a secondary owner (SharePoint admin centre → the user's OneDrive → grant access to their manager) so the content stays reachable.
  • Better: run this as a standard offboarding step rather than reacting when someone asks for a leaver's files three months later.
  • Increase the retention period tenant-wide if 30 days is too short for your process — SharePoint admin centre → Settings → OneDrive retention.
  • A Purview retention policy or legal hold overrides deletion entirely, which is the right control where litigation risk exists.
Useful admin commands
  • Get-SPOSite -IncludePersonalSite $true -Filter "Url -like '-my.sharepoint.com/personal/'" — every OneDrive in the tenant with storage figures.
  • Set-SPOUser -Site <oneDriveUrl> -LoginName <manager> -IsSiteCollectionAdmin $true — grant a manager access to a leaver's OneDrive.
  • Get-SPOTenant | Select OrphanedPersonalSitesRetentionPeriod — check the current retention window.
  • Requires the Microsoft.Online.SharePoint.PowerShell module and a SharePoint admin connection.
Policies worth configuring
  • Known Folder Move — deploy by policy so Desktop/Documents/Pictures are protected without user action.
  • Files On-Demand — leave enabled; disabling it forces full downloads and fills disks.
  • Default sharing link type — set to "People in your organisation" or "Specific people", not "Anyone".
  • Sync restrictions — block sync on unmanaged devices, and optionally block specific file types.
  • Storage quota — default is generous; set per-user limits where appropriate.

Gotchas

A leaver's OneDrive disappears with their account
  • The most consequential fact about OneDrive. Files in a personal OneDrive are owned by that account, not the organisation.
  • Anything genuinely shared or team-owned belongs in a SharePoint site or Teams channel, not somebody's OneDrive.
  • Files shared from a OneDrive stop working when the account is purged — including links other people have bookmarked.
  • This catches organisations repeatedly. Audit for team-critical content sitting in individual OneDrives before it becomes urgent.
Path length and character restrictions
  • Full path limits (around 400 characters decoded) apply just as they do in SharePoint — deep folders plus long filenames break sync.
  • Invalid characters — " * : < > ? / \ | — block sync, and the error rarely says so clearly.
  • Leading and trailing spaces in names are stripped, which can create unexpected duplicates.
  • Certain reserved names (CON, PRN, AUX, NUL) fail on Windows.
Sync conflicts create copies, silently
  • When the same file is edited in two places offline, OneDrive keeps both and appends the device name to one — it never merges and never discards.
  • You end up with Report-LAPTOP01.docx alongside Report.docx and no notification worth noticing.
  • Periodically search for filenames containing your device names to find accumulated conflict copies.
  • Office documents co-author properly and rarely conflict. It's PDFs, images, and non-Office files that produce these.
When sync is stuck
  • Click the tray/menu-bar icon first — it usually names the offending file directly.
  • Pause and resume sync. This resolves a surprising proportion of transient issues.
  • Check for a file open in another application holding a lock.
  • Last resort is unlinking and relinking the account (Settings → Account → Unlink this PC). Files stay in the cloud — but any not yet uploaded are at risk, so verify sync status first.
  • %localappdata%\Microsoft\OneDrive\onedrive.exe /reset on Windows resets the client. Re-sync afterwards takes time on a large library.

Tips

Know the 30-day full restore

Settings → Restore your OneDrive rolls everything back to a chosen point in the last 30 days. The ransomware answer, and worth knowing before an incident rather than during one.

Version history isn't Office-only

Right-click → Version history works on PDFs, images, and archives too. Frequently overlooked.

Audit what you've shared

OneDrive web → Shared → Shared by you. Most people find at least one thing still shared that shouldn't be.

Pin before you fly

"Always keep on this device" on the folders you'll need. Files On-Demand means everything else is unavailable without a connection.

Vault for sensitive documents

Personal Vault (consumer plans) adds a second identity check for passports and financial documents. Locks itself automatically after inactivity.

Scan straight into OneDrive

The mobile app scans documents, whiteboards, and receipts to searchable PDF via OCR. A genuinely good replacement for a dedicated scanning app.

Resources