📄 Article
OneDrive for Business: Complete Administration Guide
OneDrive for Business is each user’s personal cloud storage within Microsoft 365 — but it is architecturally a personal SharePoint site collection. Interviews consistently test data recovery scenarios (what happens after mass deletion or ransomware), Known Folder Move rollout, departed user data retention, and sync client controls. This guide covers all of them.
☁️ OneDrive for Business vs SharePoint Online
| Aspect | OneDrive for Business | SharePoint Online |
|---|---|---|
| Ownership | One per licensed user — personal storage | Shared team or department sites |
| Architecture | Is a personal SharePoint site collection (MySite) | Team sites and communication sites |
| Default access | Private to the owner only | Shared with team members or public audience |
| Files in Teams chats | ✅ Chat attachments are stored here | ❌ Channel files go to the team site |
| Admin centre | Managed under SharePoint admin center | Also managed under SharePoint admin center |
💡 Key Architecture Point
OneDrive for Business is not a separate product — it is a personal SharePoint site collection with the URL format https://<tenant>-my.sharepoint.com/personal/<username>. All SharePoint sharing controls and Purview retention policies apply equally to OneDrive.
💾 Storage Quotas
💡 Default and Maximum Storage
- Default: 1 TB per user (included with most M365 plans)
- Microsoft 365 E3/E5 plans provide unlimited storage (after the first 5 licensed users, the tenant pool is unlimited)
- Admins can set per-user storage quotas from the SharePoint admin center or PowerShell
- When a user’s OneDrive is full, they receive notifications — new files cannot be synced until space is freed
PowerShell — Storage Quota Management
Connect-SPOService -Url https://yourtenant-admin.sharepoint.com # Set storage quota for a specific user's OneDrive (in MB) Set-SPOSite -Identity https://yourtenant-my.sharepoint.com/personal/user_domain_com -StorageQuota 5120 -StorageQuotaWarningLevel 4608 # Check current quota and usage for a user Get-SPOSite -Identity https://yourtenant-my.sharepoint.com/personal/user_domain_com | Select StorageQuota, StorageUsageCurrent
📂 Known Folder Move (KFM)
💡 What KFM Does
Known Folder Move automatically redirects a user’s Desktop, Documents, and Pictures folders into their OneDrive, backing them up to the cloud without any change in user behaviour. Files in these folders are synced to OneDrive and accessible from any device. KFM is one of the most commonly asked-about OneDrive admin features in interviews.
Deployment Options
| Mode | User Experience | Best For |
|---|---|---|
| Silent redirection | Folders redirected automatically with a single notification toast | Managed enterprise rollout (most common) |
| Prompt users | User is asked to opt in before folders are moved | Gradual adoption or BYOD scenarios |
| Prevent users from redirecting back | User cannot undo the folder redirection | Compliance/security-focused deployments |
💡 Deployment Method
Deploy KFM via Group Policy (using OneDrive ADMX templates) or an Intune device configuration profile (Administrative Templates or Settings Catalog), targeting the OneDrive sync client. The key settings are the Tenant ID (to scope to your organisation) and which folders to redirect. KFM is usually deployed alongside restricting sync to managed/Intune-compliant devices as part of the same endpoint data protection strategy.
🔄 Data Recovery Scenarios
✅ Recovery Options — In Order of Use
- Recycle Bin (First Stage) — Deleted files go here first. User can restore. Retained for 93 days total.
- Second-Stage Recycle Bin — Items deleted from the first-stage bin go here. Admin can restore. Also within the 93-day window.
- Restore your OneDrive — Rolls back the entire OneDrive to any point in the last 30 days. Use this for mass deletion or ransomware attacks.
- Version history — Every Office file keeps up to 500 versions by default. Restore any previous version of a file without rolling back others.
- Purview eDiscovery — If a Purview retention policy or litigation hold was in place, deleted content can be recovered via eDiscovery even after the recycle bin window.
⚠️ After 93 Days With No Policy
Without a Purview retention policy or eDiscovery hold, content permanently deleted more than 93 days ago is unrecoverable without a third-party backup solution. Always configure retention policies before you need them.
👤 Departed User — OneDrive Retention
💡 What Happens When a User Account is Deleted
- The user’s OneDrive is scheduled for deletion and retained for a configurable period (default 30 days, configurable up to 10 years) in the SharePoint admin center → Settings → Retention
- During retention, the user’s manager (if set in Entra ID) receives an email notification with a link to access the OneDrive
- An admin can also grant themselves or another user access using PowerShell or the SharePoint admin center before the site is permanently deleted
- After the retention period, the OneDrive site is permanently deleted — unless a Purview retention policy extends the window
PowerShell — Departed User OneDrive Access
Connect-SPOService -Url https://yourtenant-admin.sharepoint.com # Grant admin access to a departed user's OneDrive Set-SPOUser -Site https://yourtenant-my.sharepoint.com/personal/departeduser_domain_com -LoginName admin@yourdomain.com -IsSiteCollectionAdmin $true # Check deleted OneDrive sites still in soft-delete Get-SPODeletedSite -IncludePersonalSite # Restore a deleted OneDrive site still in retention Restore-SPODeletedSite -Identity https://yourtenant-my.sharepoint.com/personal/departeduser_domain_com
🔄 Sync Client Administration
💡 Key Sync Controls
- Restrict sync to managed devices — Allow OneDrive sync only on Entra ID joined or Intune-compliant devices (SharePoint admin center → Settings → Sync)
- Block specific file types — Prevent sync of certain file extensions (e.g., .pst, .exe) from the sync settings
- Files On-Demand — Files appear as placeholders on disk and are only downloaded when opened. Saves local disk space. Enabled by default on Windows 10/11.
- Silent account configuration — Automatically sign users into the OneDrive sync client using their Windows credentials via Group Policy or Intune, removing the need for manual sign-in on managed devices
💡 Best Practices & Recommendations
- Deploy Known Folder Move early to ensure Desktop, Documents, and Pictures are automatically backed up to OneDrive — prevents data loss on device failure
- Configure Purview retention policies for OneDrive before they’re needed — without them, data deleted more than 93 days ago is permanently gone
- Set a meaningful departed user OneDrive retention period (minimum 90 days, recommended 1 year) in SharePoint admin center → Settings
- Restrict sync to managed devices only to prevent corporate data syncing to personal laptops
- Use Files On-Demand to prevent full OneDrive contents from consuming local disk space, especially on laptops with limited storage
- Educate users that files in Teams chats (not channels) are stored in their OneDrive — if they leave the organisation, those files move to the departed user retention path
🎓 Common Interview Questions
Q: A user permanently deleted files from OneDrive — what are the recovery options?
First check the OneDrive Recycle Bin (first-stage). If emptied, check the second-stage (site) recycle bin — both stages together retain items for 93 days. For mass deletion or ransomware, use “Restore your OneDrive” to roll the entire library back to any point in the last 30 days. For individual file versions, version history is available on Office files (up to 500 versions). If a Purview retention policy was in place, content may be recoverable via eDiscovery even after the recycle bin window expires.
Q: How would you configure OneDrive Known Folder Move (KFM) for an organisation?
Deploy KFM via Group Policy (using OneDrive ADMX templates) or an Intune device configuration profile (Settings Catalog or Administrative Templates). Configure the Tenant ID setting (scopes the policy to your organisation) and specify which folders to redirect — Desktop, Documents, Pictures. Use silent redirection with a one-time notification toast for managed enterprise devices (most common approach). Optionally, block users from redirecting folders back to prevent circumvention. KFM is typically deployed alongside restricting sync to managed devices as part of a broader endpoint data protection strategy.
Q: What happens to a user’s OneDrive when their account is deleted?
When a user account is deleted, the OneDrive is retained for a configurable period (default 30 days, configurable up to 10 years in SharePoint admin center → Settings → Retention). During this window, the user’s manager receives an email notification with access. An admin can also grant access via PowerShell (
Set-SPOUser -IsSiteCollectionAdmin $true). After the retention period, the OneDrive is permanently deleted. If a Purview retention policy is applied to OneDrive, content is preserved even after site deletion, and can be recovered via eDiscovery.Q: How do you restrict OneDrive sync to only managed or corporate devices?
In the SharePoint admin center → Settings → OneDrive → Sync, enable “Allow syncing only on PCs joined to specific domains” and enter your Entra ID domain’s GUID. This restricts the sync client to Entra ID joined devices. For Intune-compliant device enforcement, configure a Conditional Access policy in Entra ID targeting the OneDrive sync app, requiring device compliance. This prevents employees from syncing corporate OneDrive content to personal or unmanaged laptops.
Q: What is OneDrive Files On-Demand and why is it important?
Files On-Demand allows the OneDrive sync client to show all files and folders in Windows Explorer as placeholders without downloading them locally — files are only downloaded when opened. This means users see their full OneDrive without consuming local disk space. It is enabled by default on Windows 10/11. Icons show whether a file is cloud-only (☁️), locally available (✅), or always kept on device (⚡). It is especially valuable for devices with small SSDs and for users who have large OneDrives that would otherwise consume hundreds of gigabytes locally.
📚 References & Further Reading
- 🔗 Redirect and move Known Folders to OneDrive — Microsoft Learn
- 🔗 Restore a deleted OneDrive — Microsoft Learn
- 🔗 OneDrive retention and deletion — Microsoft Learn
- 🔗 OneDrive Files On-Demand — Microsoft Learn