OneDrive for Business file restore misses recent changes for legal folders: Fix Guide

You are a legal professional or compliance officer who relies on OneDrive for Business to preserve case files. After using the built-in file restore feature to recover a folder, you discover that documents edited within the last 24 hours are missing. This happens because the file restore feature operates on a snapshot-based recovery model that does not capture changes made after the snapshot is taken. This guide explains why the restore misses recent edits and provides the exact steps to recover those missing files without losing the restored folder structure.

Why OneDrive File Restore Misses Recent Edits in Legal Folders

The OneDrive for Business file restore feature works by reverting your entire OneDrive to a specific point in time, typically within the last 30 days. When you trigger a restore, OneDrive takes a snapshot of your library at the selected restore point and replaces the current state with that snapshot. Any files or edits created after the snapshot are not carried over; they are effectively removed from the restored folder. This is by design: the restore is a full rollback, not a merge.

For legal folders that contain time-sensitive documents, this behavior is problematic. A compliance officer might restore a case folder to a state from two days ago, only to realize that a deposition transcript edited three hours ago is gone. The file is not deleted permanently — it still exists in the version history of the file or in the recycle bin — but it is no longer visible in the folder. Understanding this distinction is critical: the restore does not destroy data; it hides the most recent changes from the folder view.

How Snapshots Work in OneDrive for Business

OneDrive creates a snapshot of your entire library each time you start a file restore operation. The snapshot captures the state of every file and folder at that moment. When the restore completes, all content that existed at the snapshot time is visible, and everything created or modified after the snapshot is hidden from the normal file view. The hidden content is not deleted; it is moved to the recycle bin or retained as previous versions within the file’s metadata.

Why Legal Folders Are Especially Vulnerable

Legal folders often have strict audit requirements and high document turnover. Multiple users may edit the same file within hours. If a restore is performed during active litigation, the missing hours of work can cause compliance gaps. Additionally, legal teams frequently use folder-level permissions, which are preserved during a restore, but the file-level version history remains intact only if you know where to look.

Steps to Recover Missing Recent Changes After a File Restore

Follow these steps in order. Do not skip the version history check before moving to the recycle bin.

1. Open the restored folder and identify missing files
   Navigate to the OneDrive folder you restored. Compare the current file list with a known list of documents that should exist. Note the file names and the approximate time of the last edit.
2. Check version history for each missing file
   Right-click a missing file in the OneDrive folder. Select Version history. A panel opens showing all saved versions, including the version created after the restore point. Click the three dots next to the most recent version and select Restore. This brings that version back to the folder. Repeat for each missing file.
3. Search the first-stage recycle bin for deleted files
   If a file does not appear in version history, it may have been deleted during the restore. Open OneDrive in your browser. Click Recycle bin in the left navigation pane. Look for files with the same name or edit date. Select the file and click Restore.
4. Check the second-stage recycle bin if the file is not in the first bin
   If the file is not in the first-stage recycle bin, scroll to the bottom of the recycle bin page and click Second-stage recycle bin. This bin holds items deleted by a restore for up to 93 days depending on your Microsoft 365 plan. Restore the file from here.
5. Use SharePoint Online Management Shell to list all file versions
   Open PowerShell as an administrator. Run Connect-PnPOnline -Url https://yourtenant.sharepoint.com/sites/YourSite. Then run Get-PnPFileVersion -Url "/sites/YourSite/Shared Documents/CaseFolder/File.docx". This returns every version including timestamps. Use the Restore-PnPFileVersion cmdlet to restore the specific version you need.
6. Audit the restore with Microsoft Purview compliance portal
   Go to the Microsoft Purview compliance portal. Select Audit and search for the Restored file activity. This shows exactly which files were affected by the restore and who performed it. Use this log to verify that you have recovered all missing content.

If the Missing Files Are Still Not Found

The file was created after the restore started

If a user created a brand-new file after you initiated the restore but before it completed, that file is not in any recycle bin or version history because it never existed at the snapshot time. The file is still in the user’s OneDrive but is hidden from the restored folder. The user can find it by searching OneDrive for the file name or by looking in their Files view under Recent. Move the file manually back into the restored folder.

The restore point was set incorrectly

Double-check the exact time and date you selected during the restore. If you accidentally chose a restore point that is earlier than the intended one, more files will be missing. You can perform another restore to a later point, but this will overwrite any files you already restored manually. To avoid data loss, complete all manual recoveries first, then run a second restore if necessary.

The file was moved to a different folder before the restore

OneDrive file restore only affects the folder structure as it existed at the snapshot. If a file was moved to a different folder after the snapshot, the restore will not bring it back to its original location. The file remains in its new folder. Search OneDrive by file name to locate it, then move it back if needed.

OneDrive File Restore vs Manual Version Recovery: Key Differences

Item	OneDrive File Restore	Manual Version Recovery
Scope	Entire OneDrive library at a point in time	Single file at a time
Preserves recent changes	No — recent edits are hidden after restore	Yes — you choose which version to restore
Time required	Minutes for large libraries	Seconds per file
Recycle bin impact	Moves post-snapshot files to recycle bin	No impact on recycle bin
Best use case	Ransomware recovery or mass accidental deletion	Recovering a single overwritten file

For legal folders where every edit matters, manual version recovery is safer than a full file restore. Use the file restore feature only when you need to revert the entire folder structure, then immediately run the version history and recycle bin checks outlined above.

You now know that OneDrive file restore does not delete recent changes — it hides them. By checking version history, both recycle bins, and using PowerShell for bulk version listing, you can recover every missing document. For ongoing protection, enable Version history settings in the OneDrive admin center to retain 500 major versions instead of the default 500. This ensures that even after a restore, you have a deep version history to pull from.