When OneDrive sync stops working, files fail to upload, or the sync icon shows a red X, antivirus software is often the cause. Antivirus programs can block OneDrive processes from reading or writing files in real time. This article explains how to test if your antivirus is interfering with OneDrive sync. You will learn a controlled method to isolate the issue and confirm the root cause.
Key Takeaways: Testing Antivirus Interference with OneDrive Sync
- Windows Security > Virus & threat protection > Manage settings > Real-time protection: Temporarily turning off real-time protection tests if it blocks OneDrive.
- OneDrive Settings > Sync and backup > Advanced settings > Pause syncing: Pausing and resuming sync after antivirus changes verifies the fix.
- Event Viewer > Windows Logs > System or Application: Checking logs after a failed sync reveals which antivirus process blocked OneDrive files.
Why Antivirus Software Blocks OneDrive Sync
Antivirus programs monitor file system activity in real time. When OneDrive tries to sync a file, the antivirus scans the file for threats. If the scan takes too long, returns a false positive, or the antivirus locks the file, OneDrive cannot complete the sync. This is not a bug in OneDrive. It is a security feature of the antivirus that inadvertently interferes with legitimate file operations.
Most antivirus solutions, including Windows Defender, McAfee, Norton, and Sophos, have a real-time protection module. This module intercepts every file read and write. OneDrive uses a sync engine that relies on file system watchers and direct file access. When the antivirus holds a file open for scanning, the sync engine times out or reports an access denied error.
The interference can appear as a permanent sync progress bar, a red X on files, or a notification that sync is paused. The test method below isolates the antivirus as the variable by temporarily disabling it.
Steps to Test If Antivirus Is Blocking OneDrive Sync
Follow these steps in order. Do not skip any step. The test requires a stable internet connection and at least one file that fails to sync.
- Identify a file that is not syncing
Open File Explorer and go to your OneDrive folder. Look for a file with a red X, a paused icon, or a sync progress indicator that never finishes. Note the file name and its size. - Pause OneDrive sync temporarily
Right-click the OneDrive cloud icon in the system tray. Select Settings. Go to the Sync and backup tab. Click Advanced settings. Under Pause syncing, select 2 hours. This prevents OneDrive from retrying the sync while you change antivirus settings. - Disable real-time protection in Windows Security
Open Windows Security. Go to Virus & threat protection. Click Manage settings under Virus & threat protection settings. Turn off Real-time protection. A User Account Control prompt may appear. Click Yes. - Resume OneDrive sync
Right-click the OneDrive cloud icon again. Select Settings. Go to Sync and backup > Advanced settings. Click Resume syncing. Wait 60 seconds and check the file that was not syncing. - Check the sync status
If the file now shows a green check mark or the sync progress completes, the antivirus was blocking OneDrive. If the file still fails, the issue is not caused by Windows Security. Re-enable real-time protection and proceed to test third-party antivirus. - Test third-party antivirus software
Open your third-party antivirus application. Locate the real-time protection or on-access scanning setting. Temporarily disable it. Resume OneDrive sync as described in step 4. If the file syncs, the third-party antivirus is the blocker.
If OneDrive Still Has Issues After the Main Test
OneDrive sync still fails after disabling antivirus
If disabling all antivirus real-time protection does not fix the sync, the problem is elsewhere. Check your network connection. Open a command prompt and run ping outlook.office365.com. If the ping fails, your firewall or proxy is blocking OneDrive. Also check that OneDrive is not paused manually and that your account is not over the storage quota.
Antivirus logs show OneDrive files being blocked
Open Event Viewer. Go to Windows Logs > Application. Filter by source name that matches your antivirus, such as Windows Defender, McAfee, or Norton. Look for event IDs 1116 or 1117 for Windows Defender. These events show that a file was quarantined or blocked. Add the OneDrive executable paths to the antivirus exclusion list. The default OneDrive executable is located at C:\Users\[YourUsername]\AppData\Local\Microsoft\OneDrive\OneDrive.exe.
OneDrive sync resumes but fails again after reboot
Some antivirus programs re-enable real-time protection after a restart. The test you performed was temporary. To make the change permanent, add an exclusion for the entire OneDrive folder. In Windows Security, go to Virus & threat protection > Manage settings > Exclusions > Add or remove exclusions. Add the folder %USERPROFILE%\OneDrive as an exclusion. For third-party antivirus, look for a similar exclusion or whitelist setting.
Windows Security vs Third-Party Antivirus: Impact on OneDrive Sync
| Item | Windows Security | Third-Party Antivirus |
|---|---|---|
| Real-time protection name | Real-time protection | On-access scanning, Auto-Protect, or Shield |
| Default blocking behavior | Scans files on open and close; rarely blocks OneDrive unless false positive | May hold files longer for deep scan; more frequent false positives |
| Exclusion setup location | Windows Security > Virus & threat protection > Manage settings > Exclusions | Varies by vendor; usually under Settings > Exclusions or Whitelist |
| Performance impact on sync | Minimal; uses cloud-delivered protection for quick verdicts | Can cause delays of 5-30 seconds per file |
Now you can identify whether antivirus is blocking OneDrive sync by running the controlled test. If the test confirms interference, add exclusions for the OneDrive executable and folder. For ongoing protection, keep real-time protection enabled but exclude OneDrive paths. This prevents sync failures without weakening your security posture.