Business owners often ask how long their OneDrive files are kept and what happens when someone leaves the company. Microsoft 365 retention policies control whether files are deleted, kept as is, or held for legal reasons. These policies apply to OneDrive, SharePoint, and Exchange, but the rules for OneDrive are different from email or Teams chats. This article explains the key retention concepts in plain language and gives you the exact steps to configure a retention policy for OneDrive. You will also learn what happens to a former employee’s OneDrive after their account is deleted.
Key Takeaways: OneDrive Retention for Business Owners
- Microsoft 365 compliance center > Data Lifecycle Management > Microsoft 365 retention policies: Where you create and edit retention rules that apply to OneDrive files across all users.
- Retention label applied to a OneDrive folder or file: Lets you keep or delete content at the item level, overriding the broader policy if needed.
- OneDrive site retention window (default 30 days after account deletion): The period during which a former employee’s files remain accessible to admins before permanent deletion.
What OneDrive Retention Actually Means for Your Business Data
OneDrive retention is not a single setting. It is a combination of Microsoft 365 retention policies, retention labels, and the default site lifecycle for deleted users. A retention policy can do three things: keep content for a set period, delete content after a set period, or both. When you apply a policy to OneDrive, it covers all files stored in every user’s OneDrive for Business site.
Retention policies work independently of user actions. If a user deletes a file from OneDrive, the retention policy keeps a copy in a secure location called the Preservation Hold library. This library is invisible to the user but visible to compliance administrators. The file remains there for the duration of the policy, even if the user empties the recycle bin.
The default behavior without any retention policy is that files are removed permanently when a user deletes them or when the user’s account is deleted. Microsoft 365 keeps a deleted user’s OneDrive for 30 days by default. After that, the site is queued for permanent deletion. You can extend this window to 365 days in the SharePoint admin center.
How Retention Differs from Backup
Business owners often confuse retention with backup. Retention is not a backup system. A retention policy prevents permanent deletion for compliance or legal reasons, but it does not create point-in-time copies you can restore to a specific date. For full backup and restore, you need a third-party backup solution or Microsoft 365 Backup.
Where Retention Policies Apply in OneDrive
Retention policies apply to the entire OneDrive site, including all documents, folders, and versions. They do not apply to metadata, permissions, or site pages. If you need to retain only specific document types, use a retention label instead of a policy.
Steps to Configure a OneDrive Retention Policy in the Microsoft 365 Compliance Center
Follow these steps to create a retention policy that applies to all OneDrive sites in your tenant. You need global admin or compliance admin permissions to complete this process.
- Open the Microsoft 365 compliance center
Go to https://compliance.microsoft.com and sign in with your admin account. - Navigate to Data Lifecycle Management
In the left navigation, select Data Lifecycle Management and then click Microsoft 365 retention policies. - Create a new retention policy
Click New retention policy. Give the policy a name, for example “OneDrive 7-Year Retention.” - Choose the locations
On the Choose locations page, toggle OneDrive accounts to the On position. Leave the other locations off unless you also want to apply the same policy to SharePoint or Exchange. - Select all or specific users
By default, the policy applies to all OneDrive accounts. To target specific users, click Choose users and add their email addresses. - Set the retention period and action
On the Decide if you want to retain content, delete it, or both page, select Retain content for a specific period. Enter the number of days or years. Choose Delete content automatically after the retention period if you want files removed after that time. - Review and finish
Review your settings and click Submit. The policy can take up to 24 hours to apply to all OneDrive sites.
What Happens to a Former Employee’s OneDrive After Account Deletion
When you delete a user from Microsoft 365, their OneDrive site enters a retention period. The default is 30 days. During this time, the site is accessible to the global admin and any user you designate as the site collection administrator. Files are not deleted automatically unless a retention policy is in place.
After the retention period ends, the site is permanently deleted. If you applied a retention policy before the user was deleted, the policy still applies to the files. The files are moved to the Preservation Hold library and kept for the duration of the policy. After the policy expires, the files are permanently deleted.
To extend the OneDrive site retention window beyond 30 days, go to the SharePoint admin center, select Policies, and then Sharing. Under OneDrive site retention, set the number of days up to 365. This setting applies to all future deleted users.
Common Misunderstandings About OneDrive Retention for Business Owners
“If I delete a file, the retention policy will restore it automatically”
No. Retention policies keep a hidden copy of the deleted file for compliance purposes. The user cannot see it in OneDrive. Only a compliance admin can search for it in the compliance center using Content Search or eDiscovery. The policy does not restore the file to the original location.
“Retention policies apply to all OneDrive files, including shared files”
Yes, the policy applies to all files in the OneDrive site, including files shared with external users. However, the policy does not affect the external user’s copy. If the external user has downloaded the file, you have no control over that copy.
“I can use a retention policy to prevent users from editing files”
No. Retention policies do not block editing or deletion. They only preserve a copy after the action occurs. To prevent editing, use Information Rights Management or sensitivity labels with encryption.
Retention Policy vs Retention Label: Key Differences for OneDrive
| Item | Retention Policy | Retention Label |
|---|---|---|
| Scope | Applies to all content in the OneDrive site automatically | Applies to specific folders, files, or document libraries manually |
| User interaction | No user action needed | Users can apply labels manually, or labels can be auto-applied based on rules |
| Flexibility | One rule for everyone in the policy | Different labels can have different retention rules within the same site |
| Administration | Managed in the compliance center under Data Lifecycle Management | Managed in the compliance center under Labels |
Use a retention policy when you need a blanket rule for all OneDrive files. Use a retention label when you need to keep certain files longer or delete them sooner than the policy allows. Labels override policies if the label action is more restrictive.
Now you can explain to business owners that OneDrive retention is controlled by policies and labels in the Microsoft 365 compliance center, not by the OneDrive sync app. Start by creating a single retention policy for all OneDrive accounts with a 7-year keep period. Then set the OneDrive site retention window to 365 days in the SharePoint admin center to give yourself more time to transfer files from former employees. A practical next step is to review the existing retention policies in your tenant and verify that OneDrive is included.