OneDrive for Business is the primary storage location for employee documents, desktop sync folders, and work-in-progress files across Microsoft 365. When employees accidentally delete files, or when ransomware encrypts local desktop folders, knowing how to back up OneDrive properly is the difference between instant recovery and permanent data loss.
Step 1: Understand OneDrive's Native Retention Limits
OneDrive features a Recycle Bin and Version History. However, deleted files are automatically purged after 93 days. Furthermore, when an employee leaves the company and their M365 account is unlicensed or deleted, their entire OneDrive is permanently deleted after 30 days unless backed up independently.
Step 2: Establish an Independent Air-Gapped S3 Storage Target
To ensure total security, back up OneDrive data to an independent S3 bucket (AWS S3, MinIO, or Cloudflare R2) with S3 Object Lock enabled in Compliance Mode. This creates an unalterable air-gap that ransomware cannot touch.
Step 3: Automate Incremental Delta Sync
Using North Brook Vault, configure automated continuous incremental backups. North Brook Vault tracks changes via Microsoft Graph APIs, capturing file modifications, folder structures, and sharing permissions without hitting rate limits.
Step 4: Perform Granular Test Restores
Verify that your team can locate and restore specific files or entire employee drives in seconds. Restores can be sent back to the original user's OneDrive or redirected to an admin target location.
Conclusion
Learning how to back up OneDrive with third-party immutable storage protects your enterprise from ransomware, account offboarding data loss, and accidental deletion.