How to Recover Data from an Archived OneDrive (No Reactivation) Using Microsoft Purview Content Search

/ Windows

Audience

Microsoft 365 / Global Admins and IT administrators who need to retrieve files from a user’s OneDrive for Business when the OneDrive site is inaccessible (for example, blocked with “SiteArchived” or link creation fails), and you do not want to pay to reactivate the archived site.

Outcome

You will run a Microsoft Purview Content search against a specific OneDrive account, then export the results so the files can be restored to a SharePoint site or another controlled repository.

1. When to Use This Procedure

Use this approach when you observe one or more of the following:

  • Creating a link to a user’s OneDrive fails (for example, “Failed to create link…”).
  • Browsing to the OneDrive URL redirects to a SharePoint error page indicating the site is archived (for example, scenario=SiteArchived).
  • SharePoint Online PowerShell shows an archive state such as ArchiveStatus: FullyArchived.
  • Reactivation is blocked or undesired (for example, it requires a paid Microsoft 365 Archive / Syntex billing profile).

This procedure is intended as a recovery/export path, not a long-term collaboration solution.

2. Prerequisites

Required permissions/roles

You need permissions in Microsoft Purview to create and run Content searches. Any of the following typically works:

  • eDiscovery Manager (recommended minimum for running searches and exporting)
  • eDiscovery Case Administrator
  • Compliance Administrator
  • Global Administrator (often still must be added to the relevant Purview role group, depending on tenant configuration)

If you cannot see eDiscovery or Content search in the Purview portal, you likely do not have the required Purview role assignment.

Tenant requirements

  • Microsoft Purview features must be available in your tenant/licensing.
  • Audit/eDiscovery features may be restricted by policy; coordinate with your compliance/security team if needed.

3. Identify the Target OneDrive

You need at least one of:

  • The user principal name (UPN), for example: support@contoso.com
  • The OneDrive site URL, for example:
    https://contoso-my.sharepoint.com/personal/support_contoso_com

Optional but recommended (PowerShell verification):

  • Confirm whether the OneDrive is archived and record timestamps for documentation.

Example PowerShell checks:

Connect-SPOService -Url https://contoso-admin.sharepoint.com

Get-SPOSite -Identity "https://contoso-my.sharepoint.com/personal/support_contoso_com" -Detailed |
  Select Url, Status, ArchiveStatus, ArchivedBy, ArchivedTime, LockState, SharingCapability

If you see ArchiveStatus indicating it is archived (for example, FullyArchived), sharing and link creation may fail until reactivated. If reactivation is not an option, proceed with Purview export.

4. Run a Purview Content Search Against the OneDrive

Step-by-step

  1. Open the Microsoft Purview portal:
    https://purview.microsoft.com

  2. Navigate to eDiscovery (or Content search, depending on your portal layout).

    • In some tenants this is under Solutions.

  3. Create a new Content search.

    • Give it a descriptive name (example: Recover - support@contoso.com OneDrive).
    • Document the related ticket/change record number in the description.

  4. Select locations / data sources

    • Choose OneDrive accounts (or “SharePoint sites / OneDrive accounts” based on your UI).
    • Add the specific user account (example: support@contoso.com) or the OneDrive location if your UI supports it.
    • Avoid selecting “All locations” unless required; it increases search time and export volume.

  5. Query / conditions

    • To recover everything from that OneDrive scope, leave the query empty (no conditions).
    • Use Condition builder only if you need to reduce volume.

    Common filters (optional):

    • File types: pdf/docx/xlsx/pptx
    • Date modified range
    • Keywords (use cautiously; it may miss content you need)

  6. Start the search and monitor status until it completes.

5. Export the Results

  1. Once the Content search completes, select Export.
  2. Choose the export options appropriate for your org:
    • Generally, export the document/library items so they can be restored elsewhere.
    • If you need deduplication or specific metadata, adjust export settings accordingly.
  3. Start the export and wait for it to finish preparing.
  4. Download the export package using the provided export key/tooling from Purview.

Operational note: Exports can be large. Use a machine with adequate storage and stable connectivity.

6. Restore Files to a Controlled Location (Recommended)

After export, restore files to a managed repository:

  • A team SharePoint site with a document library and group-based permissions
  • A SharePoint site associated with the owning department/team
  • A dedicated “Support Operations” SharePoint site with appropriate access controls

Avoid restoring back into individual OneDrive storage for long-term shared data.

7. Recommended Prevention (Avoid the Same Problem Later)

Use SharePoint for shared, business-critical, or sensitive files

OneDrive is tied to an individual identity and lifecycle. If the user is disabled, unlicensed, or the OneDrive is archived, access and sharing can break.

SharePoint provides:

  • Team-based ownership
  • Group-based access management
  • Better governance for retention, lifecycle, and auditing
  • Reduced risk that access is lost when a single user account changes

Establish a simple rule of thumb

  • OneDrive: personal working files, drafts, temporary sharing
  • SharePoint: shared team files, controlled access, sensitive/business records, long-term storage

Consider controls to reduce “link sprawl”

Depending on your security requirements:

  • Restrict anonymous links
  • Enforce expiration
  • Prefer “People in your organization” or “Specific people” links
  • Implement sensitivity labels and DLP where appropriate