How to Audit OneDrive Sync App Versions Across the Tenant
🔍 WiseChecker

How to Audit OneDrive Sync App Versions Across the Tenant

As an IT administrator, you need to know which OneDrive sync app versions are running on every device in your tenant. Outdated sync clients can cause sync failures, missing Files On-Demand features, and compliance gaps. This article explains how to use the Microsoft 365 admin center, Microsoft Graph PowerShell, and the Microsoft 365 Apps admin center to audit sync app versions across your organization. You will learn the exact steps to generate a version report, interpret the data, and identify devices that require updates.

Key Takeaways: Audit OneDrive Sync Versions Tenant-Wide

  • Microsoft 365 admin center > Reports > Usage > OneDrive > Sync app versions: Shows a tenant-wide summary of sync client versions and device counts.
  • Microsoft Graph PowerShell cmdlet Get-OneDriveSyncClientVersion: Exports a detailed CSV report of every device with its sync app version, last sync date, and device ID.
  • Microsoft 365 Apps admin center > Health > OneDrive Sync Health: Provides per-device sync status and version data for troubleshooting specific endpoints.

ADVERTISEMENT

What the OneDrive Sync App Version Audit Covers

The OneDrive sync app updates automatically on Windows and macOS when the device is connected to the internet and the sync app is running. However, some devices may fall behind due to offline periods, group policies that block updates, or third-party management tools that defer updates. As an admin, you cannot force a sync app update from the cloud. Instead, you must identify outdated clients and then use your device management tool such as Microsoft Intune or Group Policy to push the update.

The audit relies on telemetry data that the sync app sends to Microsoft 365. Each sync client reports its version number, device ID, operating system, and last successful sync timestamp. This data is available through three channels: the Microsoft 365 admin center reports, Microsoft Graph PowerShell, and the Microsoft 365 Apps admin center. Each channel offers a different level of detail and export capability.

Version Numbering and Release Channels

OneDrive sync app versions follow the format XX.YYY.ZZ.WWWW, for example 24.001.0102.0003. The first two digits indicate the year and month of the build. Microsoft releases updates through three channels: Production (stable), Insiders (early access), and Enterprise (deferred). The Enterprise channel receives updates approximately 60 days after the Production channel. You should compare reported versions against the latest Production release listed on the Microsoft 365 roadmap or the OneDrive release notes page.

Steps to Generate a Tenant-Wide Sync App Version Report

Follow these three methods to collect version data. Start with the admin center report for a quick overview. Use PowerShell for a full export. Use the Microsoft 365 Apps admin center for per-device troubleshooting.

Method 1: Microsoft 365 Admin Center Report

  1. Open the Microsoft 365 admin center
    Go to https://admin.microsoft.com and sign in with an account that has the Global Admin or Reports Reader role.
  2. Navigate to the OneDrive usage report
    In the left navigation, select Reports then Usage. Under the View reports by product section, select OneDrive.
  3. Open the Sync app versions tab
    On the OneDrive usage report page, click the Sync app versions tab. The table shows each detected sync app version and the number of devices using that version.
  4. Export the report
    Click the Export button at the top of the table to download a CSV file containing the version summary. This file includes version numbers and device counts only, not individual device identifiers.

Method 2: Microsoft Graph PowerShell

  1. Install the Microsoft Graph PowerShell module
    Open Windows PowerShell as an administrator and run Install-Module Microsoft.Graph -Scope CurrentUser. If you already have the module, run Update-Module Microsoft.Graph.
  2. Connect to Microsoft Graph with the correct scopes
    Run Connect-MgGraph -Scopes "Report.Read.All", "Device.Read.All". Sign in with a Global Admin or Reports Reader account.
  3. Run the Get-OneDriveSyncClientVersion cmdlet
    This cmdlet is part of the Microsoft Graph Beta Reports endpoint. Run the following command:
    Get-MgReportOneDriveUsageAccountDetail -Period D90 | Export-Csv -Path "C:\Reports\OneDriveSyncVersions.csv" -NoTypeInformation
    Replace D90 with D7, D30, or D90 depending on the time range you want to audit.
  4. Open the exported CSV file
    Open the CSV file in Excel or a text editor. The file contains columns including Device ID, Sync App Version, Last Sync Date, and Operating System. Filter the Sync App Version column to identify devices running versions older than the latest Production release.

Method 3: Microsoft 365 Apps Admin Center

  1. Open the Microsoft 365 Apps admin center
    Go to https://config.office.com and sign in with a Global Admin account.
  2. Navigate to OneDrive Sync Health
    In the left pane, select Health then OneDrive Sync Health. This dashboard shows a list of devices that have synced in the last 28 days.
  3. Review device details
    Click any device row to expand details. The Sync app version field shows the exact version installed on that device. You can also see the last sync timestamp, sync errors, and the device platform.
  4. Export the device list
    Click the Export button at the top of the device list to download a CSV file with all reported devices and their sync app versions.

ADVERTISEMENT

Common Issues When Auditing Sync App Versions

The Sync App Versions Tab Shows No Data

If the Sync app versions tab in the Microsoft 365 admin center is empty or shows zero devices, the tenant may have less than 10 active sync clients. Microsoft reports only aggregate data for tenants with 10 or more devices. For smaller tenants, use PowerShell or the Microsoft 365 Apps admin center to see individual device data.

PowerShell Returns an Empty CSV File

The Get-MgReportOneDriveUsageAccountDetail cmdlet requires the Report.Read.All permission scope. If the CSV file is empty or contains only headers, reconnect with the correct scope using Connect-MgGraph -Scopes "Report.Read.All". Also verify that the account used has the Reports Reader or Global Admin role.

Devices Show an Older Version Than Expected

A device may report an older version if the sync app has not run for several days. The sync app checks for updates only when it is running. If the device was offline or the sync app was paused, the version data in the report reflects the last time the app successfully synced. Instruct the user to open OneDrive and wait for the sync to complete, then run the audit again after 24 hours.

Admin Center Report vs PowerShell vs Microsoft 365 Apps Admin Center

Item Admin Center Report PowerShell Export Microsoft 365 Apps Admin Center
Data granularity Aggregated version counts only Per-device version, device ID, last sync Per-device version, sync status, errors
Export format CSV with version and count CSV with full device details CSV with device details
Minimum device requirement 10 active devices No minimum 1 active device
Required role Reports Reader or Global Admin Reports Reader or Global Admin Global Admin

Use the admin center report for a quick health check. Use PowerShell when you need a full export for compliance or upgrade tracking. Use the Microsoft 365 Apps admin center when you need to troubleshoot a specific device that shows sync errors or an outdated version.

You can now generate a tenant-wide audit of OneDrive sync app versions using the Microsoft 365 admin center report, Microsoft Graph PowerShell export, or the Microsoft 365 Apps admin center. After collecting the report, filter the version column to find devices running builds older than the latest Production release. For each outdated device, use Microsoft Intune or Group Policy to deploy the current sync app version. As an advanced step, schedule the PowerShell script monthly and save the CSV output to a SharePoint document library for version history tracking.

ADVERTISEMENT