OneDrive Admin Checklist: storage quotas do not update for security reviews

Security reviews require accurate storage quota data across all OneDrive accounts. When quotas do not update after policy changes, compliance reporting becomes unreliable and automated provisioning workflows can break. This typically happens because of a delay in the directory synchronization cycle or because a tenant-level policy setting blocks the propagation of quota changes. This article explains the root cause of the update delay and provides a step-by-step checklist to force a quota refresh for security review readiness.

Why OneDrive Storage Quotas Do Not Update Automatically

OneDrive storage quotas are controlled by two layers: the tenant-wide default quota set in the SharePoint admin center and per-user overrides applied via PowerShell or the admin center. Quota changes do not apply instantly. The Microsoft 365 service evaluates quota updates during a background job that runs every 24 hours for most tenants. Security review deadlines often require faster propagation.

A second cause is the license assignment. If a user’s OneDrive was provisioned under a trial license and later moved to a different license SKU that has a different storage limit, the quota value stored in SharePoint Online may not refresh until the user signs out and back in or until an admin runs a manual sync. Azure AD Connect delays can also hold up group-based licensing changes that affect quota.

Default Quota vs Per-User Override

The tenant default quota applies to all new OneDrive sites. Existing sites keep their current quota until an admin explicitly updates them. A per-user override set via PowerShell takes precedence over the default but must be applied individually. Security reviews that require a uniform quota across all users need both the default and the overrides to match.

Checklist to Force OneDrive Quota Updates for Security Reviews

Follow these steps in order. Each step addresses a specific cause of the update failure.

1. Verify user license assignment
   Go to Microsoft 365 admin center > Billing > Licenses. Select the product that includes OneDrive for Business, for example Microsoft 365 E3 or E5. Check that every user who needs a quota update has an active license assigned. If a user is unlicensed, assign a license and wait 15 minutes before proceeding.
2. Check tenant default storage quota
   Open SharePoint admin center > Settings > Storage limit. Note the default storage limit per user. If you change this value, it applies only to new OneDrive sites. Existing sites are not updated. To update existing sites, proceed to step 3.
3. Update storage quota via PowerShell for all existing OneDrive sites
   Open SharePoint Online Management Shell as an administrator. Run the following commands to connect and update all OneDrive sites to a specific quota, for example 1024 GB:

   Connect-SPOService -Url https://yourtenant-admin.sharepoint.com
   Get-SPOSite -IncludePersonalSite $true -Filter "Url -like '-my.sharepoint.com/personal/'" | Set-SPOSite -StorageQuota 1048576 -StorageQuotaWarningLevel 1048576

   This sets the quota to 1 TB and the warning level to the same value so no warning emails are sent. Replace 1048576 with your desired value in MB.

4. Force a delta sync from Azure AD Connect
   If your organization uses Azure AD Connect for directory synchronization, run a delta sync on the on-premises server. Open PowerShell as Administrator and run:

   Start-ADSyncSyncCycle -PolicyType Delta

   This pushes group membership changes and license updates to Microsoft 365 immediately instead of waiting for the default 30-minute sync interval.

5. Trigger the OneDrive quota refresh background job
   Microsoft 365 runs a background job that recalculates quotas. To force this job, use the SharePoint Online Management Shell to run:

   Set-SPOSite -Identity "https://yourtenant-my.sharepoint.com/personal/user_domain_com" -StorageQuota 1048576 -Force

   The -Force parameter bypasses the 24-hour cache and triggers an immediate recalculation for that site. Repeat for each user or use the bulk command from step 3.

6. Verify quota update in the admin center
   Open SharePoint admin center > Active sites. Search for the user’s OneDrive URL. Click the site and check the Storage limit field. If it still shows the old value, wait 5 minutes and refresh the page. If it does not change, run the PowerShell command from step 5 again.
7. Document the current quota state for security review
   Export the quota data to a CSV file for your compliance report. In SharePoint Online Management Shell, run:

   Get-SPOSite -IncludePersonalSite $true -Filter "Url -like '-my.sharepoint.com/personal/'" | Select Title, Url, StorageQuota, StorageUsageCurrent | Export-Csv -Path C:\quotas.csv -NoTypeInformation

   Review the CSV to confirm every user shows the correct quota.

If Quotas Still Do Not Update After Following the Checklist

OneDrive site is in a locked state

A locked OneDrive site cannot receive quota updates. Check the site status in SharePoint admin center > Active sites. If the status is Locked, unlock it by selecting the site and clicking Unlock. Then run the PowerShell quota update again.

User has multiple OneDrive sites

If a user was re-provisioned with a new OneDrive site, the old site may still hold the outdated quota. The admin center shows only the active site. Use PowerShell to list all sites for that user:

Get-SPOSite -IncludePersonalSite $true -Filter "Url -like 'user_domain.com'" | Select Url, StorageQuota

Delete the old site or update its quota to match the active site.

Group-based licensing delay

If you use Azure AD group-based licensing, the license assignment may take up to 24 hours to apply. Trigger a delta sync as described in step 4, then wait 30 minutes for the license to be evaluated. After the license is active, run the quota update from step 5.

OneDrive Quota Update Methods Comparison

Item	SharePoint Admin Center	PowerShell (Set-SPOSite)
Update speed	Up to 24 hours for existing sites	Instant with -Force parameter
Bulk update support	No, one site at a time	Yes, via Get-SPOSite pipeline
Requires admin role	SharePoint admin	SharePoint admin
Audit log entry	Yes	Yes
Works on locked sites	No	No

PowerShell is the only reliable method for forcing an immediate quota update during a security review. The admin center should be used only for verification.

After completing this checklist, you can verify that every OneDrive site shows the correct storage quota in the exported CSV. For recurring security reviews, schedule a weekly PowerShell script that runs the bulk update command and exports the quota report to your compliance team. Use the SharePoint Online Management Shell Get-SPOSite cmdlet to monitor storage usage trends so you can adjust quotas before the next review cycle.