Files deleted without my action. Computers were off. Twice files have been deleted. Files recovered on One Drive, but the user (I) did not initiate the action.

Dale N Bickenbach 20 Reputation points
2025-11-05T15:53:25.9433333+00:00

Twice multiple files have been deleted, without my, the user, initiating any action, to be recovered on one-drive. Only community solution proved for 'settings' checked. My computer technicians trying to find cause.

No known reason for this action! Not user initiated.

"We noticed that you recently deleted a large number of files from your OneDrive. When files are deleted, they are moved to your OneDrive recycle bin. If you don't restore deleted files"

This user has not a clue what 'child tag' means.

Microsoft 365 and Office | OneDrive | Other | Other
0 comments No comments
{count} votes

Answer accepted by question author
  1. Francisco Montilla 24,295 Reputation points Independent Advisor
    2025-11-05T18:16:32.0766667+00:00

    Hi Dale,

    The most useful step now is to pinpoint exactly what triggered the deletions using OneDrive's own activity trail.

    Sign in at onedrive.com, open Recycle bin, click one of the deleted files, then press the small i icon in the top right to open Details. In the Activity section you will see entries like Deleted by and often a hint such as via OneDrive for Windows, via OneDrive on the web, or the name of a shared library.

    If you click the parent folder and open its Details pane, you will usually see the same pattern across the whole batch. This tells you whether a different device signed in with your account did it, whether it happened in a shared folder because another person deleted the items, or whether it was a web action.

    OneDrive cannot delete files while a PC is powered off, so if your computers were off at that moment the activity trail will point to either another device that came online, another person who has access, or an action done in the browser earlier that synced when a device reconnected.

    If the Activity shows Deleted by you via OneDrive for Windows, that means a signed-in device performed the delete during sync, not that you necessarily clicked delete yourself. If it shows another name or a shared location, that reveals the source.

    Please run that check and tell me exactly what the Activity line says for one of the deleted files, including any via wording or library name. With that single data point I can give you the next precise fix, whether it is pausing or resetting sync on one device, removing an extra signed-in device, or correcting a shared folder. And about child tag, you can ignore that term here. It is not a OneDrive feature and is not related to your issue.


0 additional answers

Sort by: Most helpful

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.