Guest User Can Open the Folder but Not Download Files: OneDrive for Business Fix

When you share a OneDrive folder with an external guest user, they can open the folder and see the file names but receive an error when trying to download any file. This typically happens because the sharing link permissions or the tenant-level external sharing settings block downloads for guests. The root cause is often a misconfigured sharing link type or an admin policy that restricts download actions for external users. This article explains why guests see files but cannot download them and provides the exact steps to restore download access.

Why a Guest Can Open a Folder but Cannot Download Files

OneDrive for Business uses two layers of permissions: the sharing link type and the tenant-wide external sharing policy. Even if a guest user can open a folder, the link itself may have the “View only” permission, which allows seeing file names but not downloading the actual files. The tenant-level policy can also override the link settings. When an admin sets “Allow guests to view files but not download them” to On at the SharePoint admin center, every guest user is blocked from downloading regardless of the link type they receive. Another common cause is using an “Anyone” link with the “View only” option, which does not allow downloads by default.

Steps to Allow Guest Users to Download Files

Method 1: Change the Sharing Link Type to Allow Downloads

1. Open the shared folder in OneDrive
   Go to OneDrive on the web at onedrive.live.com. Sign in with the account that owns the folder. Navigate to the folder that is shared with the guest user.
2. Select the folder and click Share
   Right-click the folder or select the circle check mark, then click the Share button at the top of the page.
3. Review the link type
   In the Share dialog, click the link settings gear icon. If the link type is set to “Anyone with the link,” change it to “Specific people.” The “Specific people” link allows you to set the permission level.
4. Set permissions to Allow editing
   Under “More settings,” check the box that says “Allow editing.” This grants the guest user download and edit permissions. If you only want download without edit, leave the box unchecked and the link will default to “View and download.” Click Apply.
5. Send the new link to the guest user
   Copy the updated link and share it with the guest user. Ask them to open the link again. They should now be able to download files.

Method 2: Adjust Tenant-Level External Sharing Settings

If changing the link type does not work, the tenant policy is likely blocking downloads. You need SharePoint admin or Global admin privileges to perform these steps.

1. Open the SharePoint admin center
   Go to admin.microsoft.com. Sign in with an admin account. In the left navigation, click Admin centers > SharePoint.
2. Navigate to External sharing settings
   In the SharePoint admin center, click Policies > Sharing in the left menu.
3. Locate the guest download control
   Under “External sharing,” find the section “Choose what guests can do with shared files.” The setting is labeled “Allow guests to view files but not download them.”
4. Turn off the download restriction
   Move the toggle to the Off position. This allows guests to download files from any shared folder in your tenant. Click Save at the bottom of the page.
5. Verify in OneDrive admin center
   Go back to the Microsoft 365 admin center. Click Admin centers > OneDrive. Under Sharing, ensure that “Allow guests to download files” is enabled. If it is disabled, turn it on and click Save.

Method 3: Use a Direct Sharing Invitation Instead of a Link

When you share a folder by entering the guest user’s email address directly, OneDrive sends an invitation that grants them access to the folder with download permissions by default. This bypasses some link-level restrictions.

1. Right-click the folder in OneDrive
   Select Share. In the Share dialog, type the guest user’s email address in the “Name or email address” field.
2. Select the permission level
   Click the dropdown next to the email field. Choose “Can edit” or “Can view.” Both allow downloading. Click Send.
3. Ask the guest to accept the invitation
   The guest receives an email with a link to the folder. After they accept, they can open the folder and download files.

If Guest Users Still Cannot Download After Following the Steps

Guest User Is Blocked by Conditional Access Policy

Your organization may have a Conditional Access policy in Microsoft Entra ID that restricts external user actions. This policy can block downloads even when SharePoint settings allow it. To check, sign in to the Microsoft Entra admin center at entra.microsoft.com. Go to Protection > Conditional Access > Policies. Look for any policy that targets guest or external users. If a policy blocks download or file access, you need to modify the policy or create an exception for the guest user.

Guest User Is Using a Personal Microsoft Account Instead of a Work Account

If the guest user signs in with a personal Microsoft account such as @outlook.com or @hotmail.com, they may see the folder but cannot download due to a known behavior in some tenants. The fix is to share the folder with a work or school email address instead. If the guest only has a personal account, ask them to create a free Microsoft 365 trial account using their company email or use a different email provider that supports Azure AD B2B collaboration.

The Folder Contains Files That Are Blocked by File Type Restrictions

OneDrive admins can block specific file types from being downloaded or synced. If the folder contains .exe, .msi, .dll, or other blocked extensions, the guest user will see the file name but cannot download it. The admin must remove the file type from the block list in the OneDrive admin center under Sync > Block file types. After saving, the guest can download the previously blocked files.

Sharing Link Types: Guest Download Permissions Comparison

Item	Anyone with the link	Specific people with the link
Default permission	View only (no download)	View and download
Download allowed by default	No	Yes
Can be set to allow editing	Yes, but still requires recipient to sign in	Yes
Requires guest sign-in	No (if set to View only, no sign-in needed)	Yes
Best use case	Public sharing of view-only content	Secure sharing with specific guests who need to download

Now you can identify why a guest user sees the folder but cannot download files. Start by changing the sharing link to “Specific people” with edit permissions. If that does not work, check the tenant-level external sharing settings in the SharePoint admin center and turn off the guest download restriction. For persistent issues, review Conditional Access policies and file type blocks. As an advanced tip, use the OneDrive admin center audit logs to see exactly which permission denied the download action for the guest user.