Can a OneDrive system upgrade change the timestamps of files already stored in OneDrive?

Yoonjung Kim 0 Reputation points
2026-11-02T00:47:32.03+00:00

Could you please explain in detail whether an upgrade to OneDrive’s own system can change the saved or last-modified timestamps of files that were already stored in OneDrive, even if the user has not opened, edited, or saved those files again?

If such changes are possible, under what circumstances do they occur, and do they affect the timestamps displayed in OneDrive, the file’s internal metadata, or both?

Microsoft 365 and Office | OneDrive | For business | Windows
0 comments

2 answers

Sort by: Newest
Most helpful Newest Oldest
  1. Hani-Ng 2,835 Reputation points Independent Advisor
    2026-11-02T01:17:12.71+00:00

    Hi @Yoonjung Kim

    A OneDrive system update does not necessarily change the last-modified timestamps of files already stored in OneDrive. I could not find official Microsoft documentation confirming that a routine OneDrive service upgrade automatically changes these timestamps without another operation affecting the files or their metadata.

    However, timestamps can change even if the user has not manually opened, edited, or saved a file. For example, a file may be replaced, re-uploaded, migrated, or restored. Depending on the operation, the cloud metadata, the local file-system timestamp, or both may be affected.

    It is also important to distinguish between the Date modified value displayed in OneDrive and the metadata stored inside the file itself. A change to the timestamp shown in OneDrive does not necessarily indicate that the file contents or its embedded metadata have changed.

    If multiple files show timestamp changes around the same time as a OneDrive update, it may be helpful to review their version histories, where available, and compare their contents. In a OneDrive for Business environment, administrators may also be able to review audit logs or migration records for evidence of operations that could explain the changes.

    Therefore, while a system-side operation could potentially explain a timestamp change, the timing alone is insufficient evidence to conclude that a OneDrive service upgrade was the direct cause.

    Was this answer helpful?

    0 comments

  2. AI answer

    2026-11-02T00:48:25.9166667+00:00

    A routine OneDrive service upgrade is not documented as rewriting timestamps on existing files; if dates change near an upgrade, use Version History and Microsoft Purview auditing to determine whether a file-content, metadata, synchronization, migration, or application operation occurred.

    Which timestamp changed matters

    OneDrive for Business can expose several independent kinds of dates:

    • OneDrive/SharePoint service timestamp: The driveItem.lastModifiedDateTime value represents when the item was last modified as seen by the service. This is generally the Modified value displayed on the OneDrive website. A driveItem also has lastModifiedBy, identifying the user, device, or application associated with the last modification.^1^
    • Local Windows file-system timestamp: fileSystemInfo.lastModifiedDateTime is supplied by the client and represents when the local copy was modified. Microsoft explicitly states that this can differ from the service timestamp—for example, a file created locally on Monday but uploaded Tuesday can have Monday in fileSystemInfo while the service records Tuesday.^2^
    • Embedded document metadata: Office files, photos, and other formats can contain dates inside the file itself, such as document properties or a photo’s date taken. These are part of the content and are separate from OneDrive’s service-level Modified column.
    • Folder timestamp: A folder is also represented as a driveItem. Its service or local modified date can change independently of the dates and contents of files inside it.^1^

    Consequently, a changed date in OneDrive does not by itself establish that the document’s contents or embedded metadata changed.

    Circumstances that can change dates without a deliberate user edit

    A timestamp can change even though the user did not manually open and save the file when an operation acts on the item:

    1. A property-only metadata update
      An application, workflow, policy, or system account can modify a document’s properties. Microsoft distinguishes an item’s eTag, which covers metadata and content, from its cTag, which does not change when only metadata changes. This allows a property operation to update the item without necessarily changing file content.^1^
    2. A background application or synchronization operation
      An Office client, OneDrive sync client, integration, or authorized application can submit an update under a user, device, application, or system identity. In Purview, FileModified explicitly includes modifications to either the content or properties of a document by a user or system account.^3^
    3. Content replacement or re-upload
      If content is updated without supplying client file-system dates, Microsoft Graph automatically resets fileSystemInfo.lastModifiedDateTime to the current time.^2^ This can affect both the service-visible date and the local date after synchronization.
    4. Migration or bulk transfer
      Migration is an operation, not a routine platform upgrade. Microsoft’s FastTrack file-share migration supports transferring basic metadata including created and modified dates, but preservation depends on the migration path and tool supplying those values.^4^
    5. Folder resynchronization or re-creation
      A folder may receive a newer date after being recreated or resynchronized while the files inside retain their previous dates. A similar OneDrive case reports changed folder dates while contained file dates remained intact.^5^

    Embedded metadata changes only if a process rewrites the file content or its internal properties. A service-side list-property update does not, by itself, prove that embedded metadata changed.

    How to determine what happened

    1. Check the same file in both locations
      • In OneDrive on the web, note Modified and Modified by.
      • In Windows File Explorer, right-click the synchronized file and select Properties.
      • If only folders changed, inspect several contained files separately.
    2. Review Version History
      • In OneDrive on the web, right-click the file and select Version history.
      • Review versions around the changed timestamp.
      • Open or compare the versions rather than immediately restoring one.
      Version History records when a file or item changed and who made the change; it can also expose property changes.^6^ If content is identical but a new version or property change appears, the event was likely metadata-related rather than a substantive document edit.
    3. For administrators, search Microsoft Purview Audit
      • Search the affected time range for FileModified, plus move, copy, upload, or application activity involving the file.
      • Examine UserId, operation time, object path, and application-related details.
      • System and application operations can appear under system identities or app@sharepoint, not necessarily the named end user.^7^

    An upgrade occurring at the same time is only correlation. A corresponding version-history or audit event establishes that an operation affected the item; without such evidence, the available documentation does not support attributing the change directly to OneDrive’s service upgrade. If many files changed simultaneously and neither Version History nor Purview identifies a meaningful actor or operation, preserve the timestamps, affected paths, audit export, and sync-client logs, then open a Microsoft 365 support request for backend investigation.

    References

    1. driveItem resource type
    2. fileSystemInfo resource type
    3. Audit log activities
    4. Data Migration
    5. OneDrive just messed up all my pc - Microsoft Q&A
    6. Version history overview
    7. Detailed activity properties in the audit log
    AI-generated content may be incorrect. Read our transparency notes for more information.

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.