OneDrive data doesn’t disappear immediately when a user is deleted. Instead, it’s held in a soft-deleted state for a grace period, giving admins a window to recover critical files like documents, photos, and shared folders.
What happens to OneDrive when a user is deleted?
When a OneDrive user is deleted in Microsoft 365, their OneDrive isn’t wiped out right away. Only Global Admins, SharePoint Admins, or users with site collection permissions can access or restore these files.
End-users without admin rights? You’ll need to loop in IT. Always check your org’s retention settings first: Admin Center > SharePoint > Settings > OneDrive > Retention for OneDrive.
Method 1: Restore the Deleted User in Microsoft 365 Admin Center
If you need to get back a deleted user’s OneDrive files within the first 30 days, start here in the Microsoft 365 Admin Center. It’s the simplest way to bring back the whole account and all its files.
- Log in to the Microsoft 365 Admin Center using your Global or User Admin account.
- Go to Users > Deleted users.
- Find the user by searching their name or email.
- Select them and click Restore user account. The system will ask you to:
- Fix any issues, like matching email addresses.
- Change the password and email a temporary one.
- After it’s done, the user shows up in Active users. Add a license if they need one.
- To see the OneDrive files, go to the user’s profile > OneDrive tab, or type in their direct link. Then download, copy, or move what you need.
If something blocks the restore, try PowerShell: Run Restore-MgUser -UserId [email protected] after setting up the Microsoft Graph module.
Method 2: Restore OneDrive via PowerShell (After 30 Days)
When a user gets deleted, their OneDrive stays safe for 30 days by default (up to 93 days if your team sets a longer policy in Microsoft Purview).
After 30 days, you can’t see the user in the Admin Center anymore, but the OneDrive might still be there in a hidden “deleted” spot. Use PowerShell to bring it back.
Step 1: Download and install the latest SharePoint Online Management Shell if you don’t have it.
Step 2: Open PowerShell and connect with your Global or SharePoint admin login:
Connect-SPOService -Url https://-admin.sharepoint.com
Swap for your company’s SharePoint name.
Step 3: If you know the OneDrive link (like https://-my.sharepoint.com/personal/user1_contoso_com):
Get-SPODeletedSite -Identity
If not, see all hidden personal sites:
Get-SPODeletedSite -IncludeOnlyPersonalSite | FT Url
Step 4: Bring it back: Restore-SPODeletedSite -Identity
Step 5: Give an admin full access:
Set-SPOUser -Site -LoginName [email protected] -IsSiteCollectionAdmin $True
Put in the real admin’s email for [email protected].
Step 6: Open the link in your browser.
Log in as that admin.
Grab the files by downloading, copying, or moving them to another OneDrive, SharePoint, or safe spot.
Step 7: Once you’re done, clean it up if you want:
Remove-SPOSite -Identity
Remove-SPODeletedSite -Identity
Method 3: Access the Deleted User’s OneDrive Directly as an Admin
To pull OneDrive files from a deleted user after 30 days (but before 93 days are up), just get direct access to the site. This is for admins only and works best if you know a bit about SharePoint.
- In the Admin Center, head to Users > Active users (or Deleted users if it’s under 30 days). Pick the user > OneDrive tab > Get access to files. This gives you a quick admin link.
- If the user isn’t listed anymore, use PowerShell: Connect with Connect-SPOService -Url https://-admin.sharepoint.com, then run Get-SPODeletedSite -IncludeOnlyPersonalSite to spot the URL.
- Use the link or this PowerShell command: Set-SPOUser -Site -LoginName [email protected] -IsSiteCollectionAdmin $true to let yourself in fully.
- Open the OneDrive link in a browser (like https://-my.sharepoint.com/personal/). Sign in as the admin.
- Pick your files or folders, then use Copy to or Move to to send them to another OneDrive, SharePoint, or your computer. The website makes it easy for big batches.
Method 4: Recover Files via Microsoft Purview/eDiscovery
If the usual ways don’t cut it, like for legal reasons or big searches, turn to Microsoft Purview’s eDiscovery. You need an E3/E5 plan and Compliance Admin access. It’s great for HR switches or checks.
- Go to compliance.microsoft.com > eDiscovery > Content search.
- Start a new search: Pick the user’s OneDrive as the spot, add search words or limits (like file types or dates), and name the deleted user as the owner.
- Run it and check the previews; you should see the kept or saved files.
- If you need to lock things down, add an in-place hold (keeps data forever), then export to PST, ZIP, or original files.
- For stuff that’s been deleted, turn on advanced indexing to grab from safe storage.
Method 5: Restore OneDrive Files from a Local Sync Folder
If the deleted user had OneDrive set to sync on their computer, you might find copies right there on the device, even after the cloud ones are gone. It’s an easy backup plan, but it only works if sync is running.
- Get to the user’s computer. Find the folder: On Windows, it’s C:\Users\\OneDrive; on Mac, ~/OneDrive.
- If sync is still going, stop it: Click the tray icon > Settings > Pause so nothing gets changed.
- For files that are missing or gone: Right-click > Version history (if it’s on) or use Windows File History or Mac’s Time Machine.
- Copy everything to a safe place. If the drive got wiped or broken, start up from recovery tools and scan it.
- If local files vanished from a mistake or wipe, try a tool like Remo Recover. It checks the hard drive and brings back OneDrive files fast and safe, stuff Microsoft’s options can’t touch after the time runs out.
Conclusion
A deleted OneDrive user doesn’t always mean permanent file loss. Start with Microsoft’s built-in methods (restore user, admin access, retention, eDiscovery).
If those don’t work and the user has local sync enabled, data recovery software like Remo Recover offers a last line of defense. With quick action and proactive policies, you can turn potential disasters into minor hiccups. Empower your team today. Data security is everyone’s job.
