How to Fix SharePoint Files Deleted Without User Action
Question details
Many SharePoint folders and files were deleted automatically under a user's name without their active intervention, occurring shortly after OneDrive synchronization problems.

- Product
- Microsoft SharePoint
- Device & OS
- not provided
- Scenario
- A user notices massive deletions of SharePoint files and folders attributed to their account, despite not modifying them manually, following recent OneDrive manual sync actions.
- Observed behavior
- Files and folders are automatically moved to the SharePoint recycle bin under the user's credentials without their direct action or consent.
Before making any changes to your OneDrive client, immediately check the SharePoint recycle bin to prevent permanent data loss and preserve system logs for investigation.
Review Audit Evidence and Recover Files from Recycle Bin
Investigate the root cause of the deletions using Microsoft Purview and recover the lost items from the SharePoint recycle bin.
Do not assume that the OneDrive synchronization issue is the sole cause of the deletions without reviewing the audit logs. Deletions can be triggered by connected applications, compromised accounts, or background sync anomalies.
Navigate to the affected SharePoint site, click on 'Recycle bin' in the left navigation pane, select the deleted files and folders, and click 'Restore' to return them to their original locations.
Ask your Microsoft 365 administrator to log into the Microsoft Purview compliance portal and run an audit log search for 'Deleted file' activities under the affected user's account to identify the IP address and device responsible.
Open the OneDrive sync client on the user's computer, click the OneDrive cloud icon in the taskbar, and review the sync history for any mass deletion prompts or synchronization errors.
If the audit logs do not reveal a clear cause, escalate the incident to a Microsoft 365 administrator or Microsoft Support to investigate deeper backend logs and connected applications.

Restrict Excessive Permissions and Update Sync Client
Prevent future unauthorized or accidental mass deletions by updating the synchronization client and enforcing the principle of least privilege.
Try WPS Office for Stable Document Management
While resolving complex SharePoint and OneDrive synchronization issues, consider using WPS Office. It provides a lightweight, reliable alternative for creating, editing, and managing your essential documents without heavy syncing overhead.
- 1. Download and Install: Visit the official WPS Office website and click 'Download WPS Office Free' to get the installer for your device.
- 2. Open Your Office Files: Launch WPS Office and open your existing Word, Excel, or PowerPoint files directly. The software fully supports Microsoft Office formats.
- 3. Edit and Save Safely: Edit your documents with familiar tools and save them locally or to WPS Cloud, completely bypassing complex SharePoint sync issues.

Frequently Asked Questions
Can OneDrive sync issues cause SharePoint files to be deleted?
Yes, if a user accidentally deletes files locally or if a severe sync conflict occurs, the OneDrive client might mirror those deletions to the connected SharePoint library automatically.
How long do deleted files stay in the SharePoint Recycle Bin?
Deleted files are typically retained in the SharePoint recycle bin for 93 days before being permanently deleted. If they are deleted from the first-stage recycle bin, they move to the second-stage (site collection) recycle bin for the remainder of the 93 days.
Why does the audit log show I deleted files when I didn't?
This often happens when a background process, an outdated OneDrive sync client, or a connected third-party app performs actions using your active session tokens. Checking the IP address and user agent in the Microsoft Purview audit logs can help identify the exact device causing the issue.
How can I stop OneDrive from deleting files in SharePoint?
You can unlink your PC from OneDrive temporarily to stop the syncing process. Click the OneDrive icon, go to Settings > Account, and select 'Unlink this PC'. This prevents local actions from affecting SharePoint until the root cause is resolved.




