Permission & Access Issues

Why Unlicensed Microsoft 365 Users Can Access OneDrive & How to Fix It

Huma Ashraf Ch Oct 9, 2026 870 views

Question details

An unlicensed user is still able to access organizational OneDrive or SharePoint files using a company email address.

Why Unlicensed Microsoft 365 Users Can Access OneDrive Files

Product: Microsoft 365
Device & OS: not provided
Scenario: Managing organizational file access, securing sensitive data, and auditing user permissions in Microsoft 365.
Observed behavior: Unlicensed accounts continue to gain access to OneDrive and SharePoint files despite lacking an active Microsoft 365 subscription license.

Before you start

Ensure you are signed in to the Microsoft 365 admin center with Global Administrator or SharePoint Administrator privileges before modifying sharing policies or revoking access.

Solution 1Recommended

Review Guest Access and SharePoint Sharing Policies

Unlicensed users often retain access because their account still exists in the directory as a guest or they were granted direct sharing links.

Removing a Microsoft 365 license stops a user from using premium services like Exchange email or desktop Office apps, but it does not delete their Entra ID (Azure AD) account. If files were previously shared with them via guest invitations or 'Anyone with the link' permissions, they will continue to have access until those specific links or directory accounts are restricted.

Check the Guest Users list

Navigate to the Microsoft 365 admin center, go to 'Users', then select 'Guest users'. Locate the unlicensed user's email address and remove the guest account if they are no longer authorized.

Restrict SharePoint external sharing

Open the SharePoint admin center, go to 'Policies', and select 'Sharing'. Adjust the external sharing slider for SharePoint and OneDrive to a more restrictive setting, such as 'Existing guests' or 'Only people in your organization'.

Manage specific folder access

To revoke specific file access, navigate to the affected SharePoint site or OneDrive folder, click the three dots next to the file, select 'Manage Access', and remove the unlicensed user from the list.

Review Guest Access and SharePoint Sharing Policies

Use the Audit Log: You can use the Microsoft Purview compliance portal to run an audit log search and see exactly which files the unlicensed user has been viewing or editing.

Solution 2

Force Sign-Out and Enable Multi-Factor Authentication

The user might be accessing files through an already-authenticated session on a company device that has not yet expired.

Free Microsoft Office alternative

Looking for a Simpler Way to Manage Documents? Try WPS Office

If Microsoft 365's complex licensing rules and permission settings are causing administrative headaches, consider switching to WPS Office. It provides a lightweight, secure, and highly intuitive platform for document creation and sharing, eliminating the confusion of multi-tier enterprise licensing.

1. Download the software: Visit the official WPS Office website and download the free installation package for your operating system.
2. Install WPS Office: Run the installer and follow the on-screen instructions to set up the lightweight office suite on your device.
3. Start sharing securely: Sign in to activate your free WPS Cloud storage, where you can easily manage file sharing links and document permissions.

Free and lightweight Office alternative without complex licensing tiers.Fully compatible with Microsoft Word, Excel, and PowerPoint formats.Built-in secure cloud storage for intuitive and safe file sharing.Simple permission management that requires zero administrative training.

microsoft office alternative - wps office

Frequently Asked Questions

Do unlicensed Microsoft 365 users still have an active login?

Yes. Removing a license does not delete the underlying user account. The account remains in Microsoft Entra ID (formerly Azure AD), allowing the user to log in and access files shared with them as a guest or external user unless the account is explicitly blocked or deleted.

Can external users access SharePoint without a license?

Yes. External guests do not require a paid Microsoft 365 license within your organization to view or edit SharePoint documents, provided your organization's sharing policies are configured to allow guest links.

How can I stop a deleted user's OneDrive files from being accessed?

When a licensed user is deleted, their OneDrive is typically retained for a default period (often 30 days) and access is given to their manager. To prevent unwanted access during this time, you must manually remove access delegations in the active users list or change the OneDrive ownership in the admin center.

How do I track what an unlicensed user has viewed?

Administrators can use the Microsoft Purview compliance portal to run an Audit log search. By filtering the search by the specific user's email address and the 'Accessed file' activity, you can review a detailed list of their recent file interactions.

Document & File Issues