Shared Link Still Works After Removing Direct Access: OneDrive for Business Fix

You removed a user’s direct access to a OneDrive folder or file, but the shared link they had still opens the content. This happens because OneDrive treats shared links and direct permissions as separate systems. A link that was created before you revoked direct access can continue to work unless you also delete or change that specific link. This article explains why the link survives and provides the exact steps to stop a shared link from working after removing direct access.

Why a Shared Link Still Works After Direct Access Is Removed

OneDrive for Business uses two separate permission layers for shared content. Direct access is the permission you grant to a specific user by adding them to the file or folder sharing dialog with a specific role such as Can edit or Can view. A shared link is a token that grants access to anyone who has the link, regardless of whether that person also has direct access. When you remove a user from the direct access list, you only revoke that person’s individual permission. The shared link token remains valid because OneDrive does not automatically delete links when the underlying direct permissions change. This design prevents broken links in collaborative scenarios, but it also means you must explicitly manage links to fully revoke access.

The link type determines how much control you have. A link that is set to People in your organization or Specific people can be individually managed. A link set to Anyone with the link allows anonymous access and cannot be tied to a specific user. If you remove direct access but the link is set to Anyone, the link still works for anyone who has the URL. You must either delete the link entirely or change its settings to block further access.

Steps to Remove a Shared Link After Revoking Direct Access

Remove the Link from the OneDrive Website

1. Open OneDrive in your browser
   Go to https://onedrive.live.com and sign in with your work or school account.
2. Navigate to the file or folder
   Locate the item for which you already removed direct access.
3. Select the item and open Share
   Click the circle check mark on the left of the item name. Then click the Share button at the top of the page.
4. Open link settings
   In the Share dialog, click More options (three dots) next to the link name. Select Manage access.
5. Delete or change the link
   On the Manage access page, you will see a list of all shared links and direct permissions for that item. Find the link you want to remove. Click the X next to the link to delete it. Alternatively, click the link name and change its settings to Specific people and remove the user from the list.
6. Confirm the change
   If you deleted the link, click Delete in the confirmation dialog. The link is now broken and no longer provides access.

Use the Details Pane to Remove a Link

1. Select the item in OneDrive
   Click the file or folder to highlight it.
2. Open the Details pane
   Click the Details icon (an i in a circle) in the top-right toolbar. The Details pane opens on the right side of the screen.
3. Find the link under Shared with
   Scroll down to the Shared with section. You will see the name of the link. Click the link name to open the Manage access page.
4. Remove the link
   On the Manage access page, click the X next to the link to delete it. Confirm the deletion.

Remove a Link Using the SharePoint Admin Center

1. Open SharePoint admin center
   Go to https://admin.microsoft.com and sign in as a global admin or SharePoint admin. In the left navigation, click SharePoint.
2. Go to Active sites
   Under Sites, click Active sites. Find the OneDrive site for the user whose link you need to remove. The site URL is typically https://yourcompany-my.sharepoint.com/personal/username_domain_com.
3. Open site permissions
   Click the site name to open its details. On the menu bar, click Permissions. Under Sharing links, click Manage sharing links.
4. Find and delete the link
   Use the search box to find the specific file or folder. Select the link you want to remove and click Delete. This method is useful when you need to remove multiple links across a user’s OneDrive.

If the Shared Link Still Works After You Removed It

The user has the link saved in their browser or a bookmark

If you deleted the link but the user still accesses the content, the user may have a cached copy of the link URL. OneDrive link deletion is immediate, but the user’s browser may still show the page from cache. Instruct the user to close and reopen their browser. If the issue persists, clear the browser cache or use a private browsing window to test.

The link was set to Anyone and you did not delete it

A link set to Anyone with the link does not appear in the direct permissions list. You must specifically manage that link. If you only removed direct access, the Anyone link remains active. Follow the steps above to locate and delete that specific link. If you cannot find the link, check the file’s Manage access page for a link labeled Anyone with the link.

You removed the user from the folder but not from subfolders or files

OneDrive permissions can be set at the folder level and inherited by items inside. If you removed direct access at the folder level but the user had a shared link to a specific file inside that folder, the link still works. You must navigate to that specific file and remove its link separately.

Direct Access vs Shared Link: Key Differences

Item	Direct Access	Shared Link
Permission type	User-specific permission added in sharing dialog	Token-based URL that grants access to anyone with the link
Revocation method	Remove user from the shared list	Delete or change the link settings
Visibility in Manage access	Listed under Direct access section	Listed under Links section
Link types affected	None	All types: Anyone, People in your org, Specific people
Impact after removal	User loses access immediately	Link stops working immediately after deletion

The key takeaway is that removing direct access does not delete shared links. You must manage each layer separately to fully control access to your OneDrive content.