How to Recover Missing Files Deleted by System Account in OneDrive and SharePoint
Question details
Users are experiencing files unexpectedly disappearing from OneDrive and SharePoint, with activity logs showing they were deleted by the 'System' account.

- Product
- Microsoft OneDrive and SharePoint
- Device & OS
- not provided
- Scenario
- Attempting to locate and restore files that mysteriously vanished and appear as deleted by the system rather than a user.
- Observed behavior
- Files are missing from their original folders and document libraries. Audit logs or alerts indicate that the 'System' account initiated the file deletion.
Ensure you have the necessary permissions, such as Site Owner or Microsoft 365 Administrator access, to view all recycle bins and contact Microsoft Support if a backend investigation is required.
Restore Files from OneDrive and SharePoint Recycle Bins
The quickest and most common way to recover missing files is to check the first and second-stage recycle bins within the platform.
When files are deleted, even by system processes, they are usually sent to the platform's Recycle Bin where they are kept for up to 93 days before permanent deletion.
Log in to your SharePoint site or OneDrive online, and click on 'Recycle bin' in the left-hand navigation pane.
Locate and select the check box next to the files that were deleted by the System account, then click 'Restore' from the top menu.
If the files are not in the primary recycle bin, scroll to the bottom of the page and click 'Second-stage recycle bin' (requires Site Collection Admin rights) to search and restore from there.

Review Document Version History
If the file itself exists but its contents were overwritten or deleted by a system sync glitch, restoring a previous version can recover your data.
Contact Microsoft 365 Support for Backend Recovery
If the files are completely missing from all recycle bins, administrators must request a backend investigation and recovery from Microsoft.
Looking for a Reliable Office & Cloud Solution? Try WPS Office
If you are frustrated by unexpected sync issues, complex backend administration, or files disappearing in Microsoft 365, consider switching to WPS Office. It provides a lightweight, highly compatible alternative with its own secure cloud storage, ensuring your important documents are always safe, accessible, and easily recoverable.
- 1. Download WPS Office: Visit the official WPS Office website and download the installation file for your operating system.
- 2. Install and Sign In: Run the installer, open the application, and sign in to activate your free WPS Cloud storage.
- 3. Edit and Save Safely: Open your existing Office files directly in WPS Office and save them locally or to WPS Cloud for safe, reliable backup.

Frequently Asked Questions
Why does the System account delete files in SharePoint and OneDrive?
The 'System' account may delete files due to automated retention policies set by your organization, malware infections triggering automated safeguards, conflicting third-party synchronization tools, or backend site maintenance scripts.
How long do deleted files stay in the SharePoint Recycle Bin?
Files typically remain in the SharePoint and OneDrive Recycle Bins for 93 days from the time of original deletion. After this period, they are permanently deleted and can only be recovered via a Microsoft backend restore within a strict 14-day window.
Can I recover files if I am not an administrator?
As a standard user, you can recover files from the primary Recycle Bin or version history. However, if files are missing from the primary bin or require backend recovery from Microsoft Support, you must contact your organization's Microsoft 365 administrator for assistance.




