How to Find Who Deleted Shared Files in Microsoft 365 Family
Question details
The user is trying to identify which specific person deleted a shared file from a Microsoft 365 Family OneDrive folder after restoring it from the Recycle Bin.

- Product
- Microsoft 365 Family (OneDrive)
- Device & OS
- not provided
- Scenario
- Managing shared files and folders in a family subscription and attempting to view the activity history or deletion logs.
- Observed behavior
- Files were deleted and successfully recovered from the OneDrive Recycle Bin, but the file information and details pane do not display the name of the user who originally deleted them.
Ensure you are logged into the Microsoft account that originally shared the folder, and verify that the deleted files have been successfully restored from the OneDrive Recycle Bin before adjusting access settings.
Restrict Sharing Permissions to Prevent Future Deletions
Because Microsoft 365 Family cannot identify who deleted a shared file, the best workaround is to modify sharing permissions to prevent users from deleting files.
In Microsoft 365 Family, OneDrive does not include the detailed audit logs or advanced compliance tools found in Enterprise versions. As a result, the system does not record or display which specific user deleted a file from a shared folder. To protect your files moving forward, you must manually ask those who had access and adjust your folder permissions so guests can only view, not edit or delete, the contents.
Log into your Microsoft 365 account via your web browser and navigate to the OneDrive portal.
Find the folder or specific files that were previously deleted. Right-click the folder and select 'Manage Access' from the context menu.
Under the 'People with access' or 'Links' section, locate the users you have shared the folder with. Click the dropdown menu next to their names or the link settings.
Change the permission level from 'Can edit' to 'Can view'. Users with view-only access will still be able to read and download the documents, but they will no longer have the ability to delete them from your OneDrive.

Share Documents Securely with WPS Office
If you are frustrated by the sharing limitations and lack of file activity clarity in your current setup, consider switching to WPS Office. It provides an intuitive, lightweight, and highly compatible alternative for creating, editing, and securely sharing your important documents.
- 1. Download WPS Office: Visit the official WPS website, download the free suite, and install it on your computer.
- 2. Create a cloud document: Sign in to your free WPS account and save your document to WPS Cloud for easy collaboration.
- 3. Share with View-Only permissions: Click the 'Share' button in the top right corner and set the link permissions to 'View Only' to share safely without the risk of unwanted file deletions.

Frequently Asked Questions
Can I view detailed file activity logs in Microsoft 365 Family?
No, detailed audit logs that show exactly who deleted or modified files are exclusively available in Microsoft 365 Business and Enterprise plans. Microsoft 365 Family only shows basic version history without identifying specific user actions.
How long do deleted files stay in the OneDrive Recycle Bin?
For personal and family Microsoft accounts, deleted files remain in the OneDrive Recycle Bin for 30 days. After 30 days, or if the Recycle Bin becomes completely full, the files are permanently deleted.
Does restoring a file from the OneDrive Recycle Bin also restore its sharing links?
Yes, when you restore a deleted file or folder from the OneDrive Recycle Bin, it retains its original sharing permissions and access links, meaning users who previously had access will immediately regain it.




