How to Prepare OneDrive Data for eDiscovery Export

When your organization receives a legal or compliance request, you must export specific OneDrive files and folders for review. Microsoft Purview eDiscovery tools can search and export content, but only if the data is properly indexed and accessible. Misconfigured sync settings, file exclusions, or retention policies can block successful exports. This article explains how to prepare OneDrive for Business data so that eDiscovery export completes without missing files or metadata.

Why OneDrive Data Needs Preparation Before eDiscovery Export

eDiscovery in Microsoft 365 relies on the search index built by SharePoint Online, which powers OneDrive for Business. If a file is not indexed, it will not appear in search results and cannot be exported. Indexing can fail for several reasons: the file type is blocked by sync settings, the file is stored only locally on a user’s device, or the file is encrypted or corrupted. Additionally, files that are subject to a retention hold may be excluded from export if the hold is not configured correctly. Preparing OneDrive data means verifying that all relevant content is online, indexed, and not excluded by tenant policies.

How eDiscovery Searches OneDrive Content

Microsoft Purview eDiscovery uses a content search that queries the SharePoint Online index. Each user’s OneDrive is treated as a separate SharePoint site. The search includes all files stored in the user’s OneDrive library, including shared files that the user has access to. However, files that are not synced to the cloud, files in excluded folders such as the OneDrive recycle bin, and files with blocked extensions are invisible to the search engine.

Common Reasons OneDrive Files Are Missing from eDiscovery Results

The most frequent causes include: files stored only on a local device and not uploaded to OneDrive, file types blocked by the tenant’s sync exclusion list, files that were deleted and are only in the second-stage recycle bin with limited retention, and files that are encrypted with a third-party tool that SharePoint cannot index. Understanding these root causes helps you target your preparation efforts.

Steps to Prepare OneDrive Data for eDiscovery Export

Follow these steps to ensure your OneDrive content is searchable and exportable through Microsoft Purview eDiscovery.

1. Verify that all relevant files are synced to the cloud
   Open OneDrive sync app settings by right-clicking the OneDrive cloud icon in the system tray and selecting Settings. Go to Sync and backup > Advanced settings. Under Files On-Demand, ensure the setting is enabled. This makes all files visible online even if they are not downloaded locally. For files that are marked as Always keep on this device, confirm they have uploaded by checking the OneDrive online folder at onedrive.com.
2. Check and remove file type exclusions
   Sign in to the Microsoft 365 admin center at admin.microsoft.com. Go to SharePoint admin center > Policies > Access control > Apps that don’t use modern authentication. Then navigate to OneDrive admin center > Sync > Sync restrictions. Under Block syncing specific file types, review the list. Remove any file extensions that your eDiscovery case requires. Common blocked types include .tmp, .log, and .iso. Save changes and allow up to 24 hours for the update to propagate.
3. Ensure retention holds are applied correctly
   In the Microsoft Purview compliance portal, go to Data lifecycle management > Microsoft 365 retention policies. Verify that your retention policy includes OneDrive locations. If you are using a litigation hold, confirm the hold is applied to the specific user’s OneDrive site. A hold prevents automatic deletion but does not block indexing. To check hold status, use the eDiscovery case and add the user’s OneDrive URL as a data source.
4. Run a test content search before the export
   In the Microsoft Purview compliance portal, go to eDiscovery > Content search. Create a new search. Under Locations, choose Specific locations and add the user’s OneDrive URL. The URL format is https://-my.sharepoint.com/personal/__com. Run the search and review the results. If files are missing, check the search query syntax and confirm the user’s OneDrive is correctly licensed.
5. Export the search results
   After confirming the content search returns the expected files, select the search and click Export. Choose to export all items or only unique files. Select the export format: either compressed ZIP files or individual files. For large exports, use the Microsoft 365 Export tool for faster transfer. After the export completes, download the results and verify the file count matches the search output.

If OneDrive Files Are Still Missing from eDiscovery Results

Even after preparation, some files may not appear in eDiscovery exports. Address these specific scenarios.

Files are stored only on a local device and never uploaded

Ask the user to move or copy those files into their OneDrive folder. After the files sync, wait for the OneDrive sync status to show a green checkmark. Then re-run the content search. Files that were never uploaded cannot be discovered by eDiscovery.

Files are in the OneDrive recycle bin

eDiscovery does not search the recycle bin. If the files were recently deleted, restore them from the OneDrive recycle bin within 93 days. After restoration, the files reappear in the user’s OneDrive and become searchable. For files deleted beyond 93 days, contact Microsoft Support to attempt a data recovery.

Files are encrypted or corrupted

SharePoint Online cannot index files that are encrypted with a non-Microsoft tool or that are corrupted. Ask the user to provide a decrypted copy of the file. Upload the copy to OneDrive and allow indexing to complete. This process can take up to 24 hours.

Files On-Demand vs Always Keep on This Device: eDiscovery Impact

Item	Files On-Demand	Always Keep on This Device
Description	Files appear in File Explorer but download only when opened	Files are downloaded to local storage and stay synced
eDiscovery searchability	All files are indexed in the cloud and searchable	All files are indexed in the cloud and searchable
Risk for missing files	Low – files are always online	Low – files are always online
Local storage requirement	Minimal – placeholder files only	Full file size on disk
Best for eDiscovery preparation	Recommended – ensures all files are available online	Acceptable – but requires more local space

Both modes make files available online and therefore searchable. Files On-Demand is the preferred setting because it guarantees all files are present in the cloud without consuming local disk space. Always Keep on This Device can cause confusion if a file is marked as offline-only and not synced, though this is rare.

Conclusion

You can now prepare OneDrive data for eDiscovery export by verifying cloud sync, adjusting file type exclusions, and applying correct retention holds. Run a test content search in the Microsoft Purview compliance portal before the official export to catch missing files early. For ongoing compliance, enable audit logging and consider using eDiscovery Premium for advanced processing and review workflows.