What Data Should Not Be Stored or Synced to Microsoft OneDrive
Question details
Users need to know what types of sensitive information or restricted files should be excluded from Microsoft OneDrive's automatic synchronization to prevent unauthorized access.
- Product
- Microsoft OneDrive
- Device & OS
- not provided
- Scenario
- Managing cloud storage synchronization to protect confidential information from being uploaded without explicit user consent.
- Observed behavior
- OneDrive automatically syncs the Desktop, Documents, and Pictures folders, potentially exposing highly sensitive, confidential, or restricted organizational files to the cloud.
Before adjusting your synchronization settings, consult your organization's data classification and retention policies to identify which local files contain sensitive or restricted information.
Disable Known Folder Backup in OneDrive
Stop OneDrive from automatically syncing your Desktop, Documents, and Pictures folders to prevent the accidental cloud storage of confidential data.
By default, OneDrive may enable 'Known Folder Backup' during Windows setup. Disabling this feature gives you manual control over exactly what gets uploaded to the cloud.
Click the OneDrive cloud icon in your system tray (Windows) or menu bar (Mac). Click on the gear icon (Help & Settings) and select 'Settings'.
In the Settings window, go to the 'Sync and back up' tab and click the 'Manage back up' button.
Turn off the toggles for the Desktop, Documents, or Pictures folders to stop syncing them, then confirm your choice by clicking 'Stop backup'.
Identify and Exclude Restricted File Types
Ensure you are not attempting to upload restricted system files or unsupported formats to OneDrive.
Secure Your Account with Multifactor Authentication
Add an extra layer of security to protect the non-sensitive data that you do choose to sync to OneDrive.
Try WPS Office for Secure Local Document Management
Looking for a secure, lightweight alternative to Microsoft Office? WPS Office offers high compatibility with Microsoft formats while giving you full control over where your documents are saved—allowing you to keep sensitive data strictly on your local device.
- 1. Download the Installer: Visit the official WPS Office website and download the free installer for your operating system.
- 2. Install the Software: Run the setup file and follow the brief on-screen instructions to install WPS Office on your device.
- 3. Open and Edit Securely: Open your existing Microsoft Office files directly in WPS Office. Save them to a local offline folder to prevent any automatic cloud syncing.
Frequently Asked Questions
Why did OneDrive sync my files without asking me?
During the initial setup of Windows or OneDrive, the 'Known Folder Backup' feature is often enabled by default. This automatically redirects and syncs your standard Desktop, Documents, and Pictures folders to the cloud without requiring a manual upload.
What specific file types are blocked by OneDrive?
OneDrive may restrict certain system configuration files (such as .exe, .msi, and .cmd), files with invalid characters in their names, and excessively large files depending on your specific Microsoft 365 subscription tier.
Can I keep sensitive files on my PC without syncing them?
Yes. You can either disable OneDrive's Known Folder Backup entirely, or simply store your sensitive files in a local directory (like C:\LocalData) that is completely outside of the designated OneDrive folder hierarchy.
