When you attempt a file restore for a former employee’s OneDrive, you may discover that the most recent changes are missing from the restored set. This happens because OneDrive’s file restore feature uses version history snapshots, and those snapshots can be incomplete if the user’s license was removed or the account was deleted before the restore was initiated. This article explains why recent changes are absent, provides a step-by-step checklist to recover those missing files, and outlines related scenarios where the same gap can occur.
Key Takeaways: Recover Missing Changes in Former Employee OneDrive Restore
- Microsoft 365 admin center > Users > Active users > Select user > OneDrive tab: Check the OneDrive status and available version history before initiating a restore.
- OneDrive admin center > Restore OneDrive: Use this tool for self-service restores but be aware it only pulls from existing version snapshots, not recent unsaved changes.
- eDiscovery Content Search or Microsoft Purview eDiscovery (Premium): Search for and export the most recent versions of files from the former employee’s OneDrive when the standard restore misses recent changes.
Why OneDrive File Restore Misses Recent Changes for Former Employees
OneDrive file restore works by reverting the document library to a previous point in time using stored version history. When an employee leaves the organization, several changes occur that can affect the available version history:
First, when the user’s Microsoft 365 license is removed, OneDrive stops syncing new changes. The version history that was created up to the moment of license removal is preserved, but any changes made after that point — for example, if the user had offline files that later sync — are not captured as new versions. Second, if the user account is deleted, the OneDrive site enters a retention period (30 days by default, extendable to 93 days with a retention policy). During this period, version history is still accessible, but no new versions are created because the site is in a read-only state for the deleted user. Third, the file restore tool itself has a limitation: it can only restore to a point in time where a version snapshot exists. If the most recent version snapshot is from before the employee’s last day of work, the restore will not include files created or modified after that snapshot.
Version Snapshot Gaps
OneDrive creates version snapshots automatically at intervals, but not continuously. If the former employee made changes in the hours before leaving and those changes were saved to OneDrive, they should appear in version history. However, if the changes were made to files that were synced offline and the sync did not complete before license removal, those changes may never be uploaded. In that case, the file restore feature has no record of them.
Checklist: Steps to Recover Missing Recent Changes
Follow this checklist in order to locate and restore files that the standard file restore missed.
- Verify the OneDrive status of the former employee
Go to the Microsoft 365 admin center at admin.microsoft.com. Navigate to Users > Active users. Find the former employee, select their name, and open the OneDrive tab. Note the URL of the OneDrive site. Check whether the account is still active, has a license, or is in a deleted state. If the account is deleted, note the retention expiration date. - Run the standard file restore and note the restore point
In the OneDrive admin center at admin.onedrive.com, select Restore OneDrive. Enter the URL of the former employee’s OneDrive. Select the date and time you want to restore to — typically the day before the employee left. Click Restore. After the restore completes, compare the restored files to a known list of recent changes. Document which files and versions are missing. - Check version history on specific files
Open the former employee’s OneDrive site directly in a browser. Navigate to a folder that should contain the missing changes. Right-click a file and select Version history. Review the list of versions. If the most recent version is older than expected, the changes were never uploaded. If a newer version exists but was not included in the restore, the restore point was set too early. - Use eDiscovery Content Search to find the latest versions
Go to the Microsoft Purview compliance portal at compliance.microsoft.com. Select Content search. Create a new search. In the locations tab, choose Choose specific sites and add the former employee’s OneDrive URL. Under the search query, use a date range that covers the period after the last known good version. Run the search. Review the results and export the files. This method can retrieve versions that the file restore tool may have missed because it searches the actual document library, not just the snapshot used for restore. - Use Microsoft Purview eDiscovery (Premium) for deeper recovery
If the Content Search does not return the missing versions, use eDiscovery (Premium). In the compliance portal, select eDiscovery > Premium > Cases. Create a new case. Add the former employee as a custodian, which will place a hold on their OneDrive data. Review all versions of files using the Review sets feature. Export the files. eDiscovery (Premium) can access version history that is not exposed through the standard restore interface. - Restore the former employee’s OneDrive site using PowerShell
If the file restore tool and eDiscovery methods fail, use SharePoint Online Management Shell. Connect to SharePoint Online withConnect-SPOService -Url https://[tenant]-admin.sharepoint.com. RunRestore-SPODeletedSite -Identity [OneDrive URL]to restore the entire OneDrive site if it was deleted. After restoration, check version history again. This method is only useful if the site was deleted within the retention period.
If the File Restore Still Misses Changes: Related Failure Patterns
OneDrive file restore does not include files created on the last day of work
This occurs when the file restore point is set to a time before the employee created or modified those files. The fix is to run the restore again with a later restore point. If the employee’s license was removed before the restore, the files may never have synced. In that case, check the local device (if available) for offline copies, or use eDiscovery to search for the files in the OneDrive site directly.
File restore succeeds but some files show an older version than expected
Version history can be truncated if the OneDrive site has exceeded its storage quota or if the version retention settings have been modified. The default version limit is 500 major versions. If the former employee had many versions, the oldest ones are removed first. To avoid this in the future, set a higher version limit in the OneDrive admin center under Storage > Version settings. For the current gap, use eDiscovery to search for the specific version you need.
Cannot access the former employee’s OneDrive at all
If the user account was permanently deleted and the retention period has expired, the OneDrive site is permanently removed. In this case, no restore is possible. To prevent this, configure a longer retention policy in the SharePoint admin center under Policies > Retention. Apply a policy that retains OneDrive content for 90 days or more after account deletion.
File Restore Methods: Standard vs eDiscovery vs PowerShell
| Item | Standard File Restore | eDiscovery Content Search | PowerShell Restore-SPODeletedSite |
|---|---|---|---|
| Description | Self-service restore in OneDrive admin center using version snapshots | Search and export files from OneDrive site using compliance portal | Restore a deleted OneDrive site via SharePoint Online Management Shell |
| Restore scope | Entire OneDrive to a single point in time | Specific files or folders matching a search query | Entire OneDrive site |
| Access to recent changes | Only versions that existed at the restore point | All versions that still exist in the site, including those after the last snapshot | All versions that existed before site deletion |
| Best use case | Quick bulk restore when version history is complete | Missing recent changes after standard restore fails | Site was deleted and needs full recovery |
You now have a structured approach to recover missing file changes from a former employee’s OneDrive. Start with the standard file restore and version history check. If recent changes are still missing, use eDiscovery Content Search or eDiscovery Premium to locate and export the latest versions. To prevent this gap in the future, configure OneDrive retention policies and version limits before an employee departs. An advanced tip: set a OneDrive retention label that automatically retains all versions for 90 days after account deletion, giving you a wider window for recovery.