UserAgent MS SkyDrive sync deleting the files from SPO site

Hello,

We have a situation in our company.

One of our users got an email regarding mass file deletion from a SPO site.

Strange this is that the user claims that she has not deleted any files. She just synced the libraries of that site on her machine using OneDrive.

After syncing, she received the aforementioned email.

Also, interesting thing is that yes, there are lot of deleted files in the recycle bin BUT those files are also there in the respective libraries, absolutely intact and user is able to access those files using OneDrive sync without any issues.

When I generated Audit Logs, I found the user's name against the deletion but the UserAgent was Microsoft SkyDrive Sync.

Any specific reason for UserAgent MS SkyDrive Sync to be included when it comes to mass file deletion?

Moved from: OneDrive / Windows 10 / Microsoft 365 Family

Answer
Answer
Hi PrabhatSingh,

Sorry for the late reply. From your description, you have a user who sync SharePoint document library with OneDrive sync application on her computer. She noticed that a mass file deletion as she noticed an email notification. However, you noticed that a record in Audit Log about UserAgent MS SkyDrive sync.

Generally, Microsoft SkyDrive sync under UserAgent section indicates that this file is deleted by the user from OneDrive sync folder on her computer. After she deleted the file from OneDrive sync folder, OneDrive sync application will sync these changes as well to SharePoint document. library. And you can find the deleted file from SharePoint site recycle bin.


To figure out the user who deletes this file, you can refer to the User section in Audit Log.

If the user claims that she didn’t deleted any file or accidently delete these files or accidently delete these files from her OneDrive sync folder. Based on my experience, the files could be deleted by the other third-party software, such as the anti-virus software. Sometimes, the anti-virus software would slightly remove some files from user’s computer without any notices after the scanning.

Best regards,
Dihao

-----------------------
* Beware of scammers posting fake support numbers here.
* Kindly Mark and Vote this reply if it helps, as it will be beneficial to more community members reading here.

5 people found this reply helpful

·

Was this reply helpful?

Sorry this didn't help.

Great! Thanks for your feedback.

How satisfied are you with this reply?

Thanks for your feedback, it helps us improve the site.

How satisfied are you with this reply?

Thanks for your feedback.

 
 

Question Info


Last updated September 24, 2024 Views 8,913 Applies to: