OneDrive for Business file restore misses recent changes for former employees: Fix Guide

When you restore a former employee’s OneDrive, you might find that files created or modified in the last 30 days are missing. This happens because the default retention period for a deleted user’s OneDrive is 30 days, and the restore process does not always include changes made just before deletion. The OneDrive admin center’s “Restore” option pulls from a snapshot that may not capture the most recent file versions. This article explains why recent changes go missing and provides the exact steps to recover those files.

Why Recent Changes Are Missing After OneDrive Restore

When you delete a user from Microsoft 365, their OneDrive enters a retention period that lasts 30 days by default. During this time, the OneDrive site still exists, but the user cannot access it. If you restore the user within those 30 days, the OneDrive site is reactivated with the data as it existed at the time of deletion. However, if the user made changes in the hours or days before deletion, those changes may not be captured in the snapshot used for restoration.

The OneDrive restore feature in the admin center works by reverting the site to a previous point in time. It does not pull the absolute latest version of every file. Instead, it uses the last known good state, which can be several hours old. Additionally, if the user’s account was deleted and then the OneDrive was restored separately, the restore operation might use an even older snapshot. This gap is the primary reason recent file versions appear missing.

The 30-Day Retention Window

Microsoft 365 keeps a deleted user’s OneDrive for 30 days. After that, the site is permanently removed. The 30-day countdown starts on the day you delete the user account. If you restore the user after day 29, you still get the data from day 29, but any changes made on day 30 are lost because the site was already scheduled for deletion. The retention period can be extended up to 365 days using PowerShell or a support request, but this must be configured before the user is deleted.

The Restore Snapshot Lag

The OneDrive admin center’s “Restore OneDrive” feature uses snapshots that are taken periodically, not continuously. If a former employee edited a file 2 hours before deletion, that version might not be in the snapshot. The restore function then reverts to the nearest earlier snapshot, which omits those recent edits. This is not a bug — it is a design limitation of the snapshot-based restore system.

Steps to Recover Missing Recent Changes from a Former Employee’s OneDrive

Follow these steps in order. Start with the simplest method and escalate only if needed.

Method 1: Restore the User Account and OneDrive Together

1. Sign in to the Microsoft 365 admin center
   Go to admin.microsoft.com and sign in with a Global Administrator account.
2. Navigate to Deleted users
   Select Users from the left navigation, then choose Deleted users. Find the former employee in the list.
3. Restore the user
   Click the user’s name, then select Restore user. Confirm the action. This restores the user account and reconnects the OneDrive site.
4. Access the OneDrive directly
   Once restored, go to Users > Active users, click the user, and under the OneDrive tab, select Open OneDrive. Check the version history of any file that seems out of date.
5. Check version history for recent changes
   Right-click a file in OneDrive, select Version history, and look for versions dated after the restore snapshot. Download any that are missing.

If version history does not show the missing changes, proceed to Method 2.

Method 2: Use the OneDrive Admin Center Restore with a Custom Date

1. Open the OneDrive admin center
   Go to admin.onedrive.com and sign in as a Global Administrator or SharePoint Administrator.
2. Select the user’s OneDrive
   In the left pane, click User, then type the former employee’s name in the search box. Select their OneDrive site from the results.
3. Click Restore OneDrive
   On the user’s detail page, click Restore OneDrive. A panel opens on the right.
4. Set a custom restore date
   Select Custom date and time. Enter a date and time that is after the user’s last known edit. For example, if the user was deleted on March 15 at 5:00 PM, set the restore to March 15 at 4:00 PM.
5. Start the restore
   Click Restore. The process may take several minutes. When complete, check the files again.

If the custom date restore does not recover the files, the changes were likely not captured in any snapshot. Use Method 3.

Method 3: Search for Files Using eDiscovery

1. Go to the Microsoft Purview compliance portal
   Open compliance.microsoft.com and sign in with an account that has eDiscovery Manager permissions.
2. Create a new content search
   Select Content search from the left menu, then click New search. Give the search a name, such as “Former Employee OneDrive Recovery.”
3. Add the user’s OneDrive site URL
   Under the Locations tab, select Choose sites. Paste the former employee’s OneDrive URL in the format https://[tenant]-my.sharepoint.com/personal/[user]_[domain]_com. Click Add.
4. Set a date range
   Under the Conditions tab, add a date range that covers the last few days before the user was deleted. For example, from 7 days before deletion to the deletion date.
5. Run the search and preview results
   Click Search. Once complete, preview the results. You can download files that appear in the search results, even if they are not visible in the restored OneDrive.

If Files Are Still Missing After These Steps

The 30-day retention period has already expired

If more than 30 days have passed since the user was deleted, the OneDrive site is permanently removed. Microsoft 365 does not keep a backup beyond the retention period. In this case, recovery is not possible unless you have a third-party backup solution that archived the data. To prevent this in the future, configure a longer retention period for all users before any deletions occur. Use the SharePoint Online Management Shell to set the OneDriveForBusinessRetentionPeriod to up to 365 days.

The user’s OneDrive was deleted before the user account

In some workflows, an admin deletes the OneDrive site directly from the SharePoint admin center without deleting the user account. When this happens, the site goes to the SharePoint recycle bin, which has a 93-day retention. To recover it, go to the SharePoint admin center, select Recycle bin, find the site, and restore it. Then follow Method 1 or 2 above.

The restore operation failed due to site lock

If the former employee’s OneDrive is locked (for example, because of a legal hold), the restore may fail. Check the site’s status in the OneDrive admin center. If it shows “Locked,” remove the hold by editing the retention policy in the compliance portal, then retry the restore. After the restore, reapply the hold if needed.

OneDrive Restore Options for Former Employees: Comparison

Item	Restore User Account	OneDrive Admin Center Restore	eDiscovery Content Search
Description	Reactivates the deleted user and reconnects the OneDrive site	Reverts the OneDrive site to a previous point in time	Searches for files across the OneDrive site without modifying it
Data retention	Up to 30 days from deletion	Depends on snapshot availability, usually within 30 days	Up to 30 days from deletion, or longer if retention policy extended
Recovers recent changes	Only if changes were in the snapshot at deletion time	Only if changes were in the selected snapshot	Yes, can find files that were not in any snapshot
Permissions required	Global Administrator	SharePoint Administrator or Global Administrator	eDiscovery Manager
Use case	User was recently deleted and you need full access again	Files are corrupted or accidentally deleted, and you need a previous version	Recent changes are missing and not found via other methods

When you need to recover a former employee’s files, start with restoring the user account. If recent changes are missing, use the OneDrive admin center restore with a custom date. For the deepest search, use eDiscovery content search. Configure a longer retention period of up to 365 days using the SharePoint Online Management Shell cmdlet Set-SPOTenant -OneDriveForBusinessRetentionPeriod 365 to give yourself more time for future recoveries. This one setting can prevent the most common cause of missing recent changes.