Can OneDrive Backup an External Drive? (w/Examples) + FAQs

No. Microsoft OneDrive does not natively back up an external hard drive, USB stick, SD card, or mapped network drive. The built-in PC Folder Backup feature is hard-wired to protect only three Windows “known folders” that live on the C: drive: Desktop, Documents, and Pictures. If your files sit on a drive letter other than C:, OneDrive will refuse to add them, and any attempt to redirect a known folder onto removable media triggers an “unsupported location” error.

That rule comes from Microsoft’s own OneDrive restrictions and limitations documentation. The consequence is simple: photographers, videographers, contractors, and students who store their work libraries on a portable SSD cannot point OneDrive at that SSD and walk away. They must use a workaround, such as moving the entire OneDrive sync root to the external drive, creating a symbolic link, or pairing OneDrive with a third-party tool like Robocopy, FreeFileSync, or AOMEI Backupper.

According to MSP360, OneDrive is used by roughly 55% of all personal cloud-storage users worldwide, and a growing share of them store work on external media. That collision between Microsoft’s C:-only design and the real-world use of portable drives is the core issue this guide solves.

Here is what you will learn:

• 🔍 Why OneDrive refuses to back up external drives out of the box, and the exact Microsoft rule that blocks it.
• 🛠️ Five proven workarounds to get an external drive into OneDrive, ranked from easiest to most advanced.
• ⚖️ How federal rules like HIPAA, GLBA, and the FTC Safeguards Rule change what you can legally sync.
• 🧭 How OneDrive Personal, Family, Business, and Education tiers differ when you point them at a USB drive.
• 🚫 The seven most common mistakes people make, plus pros, cons, do’s, don’ts, and ten FAQs.

The Short Answer: Why OneDrive Says No

OneDrive’s sync client is designed around a single user profile folder on the internal system drive. When you click Manage Backup inside OneDrive Settings, the dialog only exposes Desktop, Documents, and Pictures. Microsoft calls these “known folders,” and the feature is known as Known Folder Move (KFM). The governing design rule is that KFM targets only folders whose canonical path starts with %UserProfile%\, which by default resolves to C:\Users\<You>\.

The consequence of this rule is that if you plug in a portable 4 TB drive labeled E:\ and try to add E:\Photos to OneDrive backup, the client silently ignores the folder. Worse, if you move your Windows Pictures folder onto E:\ first and then enable KFM, OneDrive throws error code 0x8004de40 or pops the warning “Your IT department has set a policy that prevents your folder from being moved.” The direct cost is lost time, mysterious sync errors, and in extreme cases file corruption when the external drive disconnects mid-sync.

A common misconception is that Microsoft 365 Family’s 6 TB pool (1 TB × 6 users) unlocks external-drive backup. It does not. Storage quota and sync scope are two different rules. You can upload files from an external drive manually through the OneDrive web portal, but that is not a backup; it is a one-time copy that never updates when the source file changes.

Where the Limit Comes From

Microsoft’s SharePoint and OneDrive sync engine uses NTFS reparse points and a local database stored in %LocalAppData%\Microsoft\OneDrive. When the drive letter assigned to your external disk changes, as it often does on laptops with multiple USB ports, the reparse points break and OneDrive marks every file as “location not available.” The consequence is a full resync the next time the drive reappears, which can burn hours of bandwidth on a large photo library. A practical misconception is that using the same drive letter every time solves the problem; Windows will sometimes remap letters when a card reader is plugged in first, breaking the chain anyway.

The Two-Drive Rule

Microsoft’s engineering guidance for enterprise deployments assumes one user profile on one internal drive. Any deviation is unsupported, meaning Microsoft Support will decline to troubleshoot sync issues caused by external-drive setups. The real-world consequence is that a small business owner running a custom symbolic-link setup loses access to official support. A common misconception is that “unsupported” means “forbidden.” It does not; it simply means you are on your own if sync breaks.

Five Workarounds That Actually Work

These five methods get files on an external drive into OneDrive. Each one has trade-offs around reliability, automation, and cost.

Method 1: Move the Entire OneDrive Folder to the External Drive

This method, documented by AOMEI and MultCloud, unlinks OneDrive, relocates its root folder to E:\OneDrive, and re-links the account. Every file that syncs to the cloud now lives on the external drive. The plain-English explanation is that you are tricking OneDrive into thinking your external disk is the user profile. The consequence of violating good practice here, such as unplugging the drive while OneDrive is syncing, is file corruption or a full “resync required” event that can take days on a 1 TB library.

A real-world example is Sarah, a freelance wedding photographer in Austin, who keeps 800 GB of RAW files. She moved OneDrive to her Samsung T7 SSD to save internal storage. A common misconception is that this method backs up the external drive itself; it does not. It only backs up files you place inside the relocated OneDrive folder.

Method 2: Symbolic Link (mklink) Redirect

A symbolic link tricks Windows into treating E:\Projects as if it were C:\Users\You\OneDrive\Projects. You open an elevated Command Prompt and run mklink /D "C:\Users\You\OneDrive\Projects" "E:\Projects". OneDrive then sees the folder as local and syncs it. The consequence of failing to keep the external drive mounted is that OneDrive deletes the cloud copy, interpreting the empty junction as “user removed files.”

A real-world example is Mike, a solo CPA in Phoenix, who symlinks his QuickBooks backup folder from an encrypted WD My Passport to OneDrive for Business. A common misconception is that symlinks bypass the 250 GB individual file upload limit; they do not.

Method 3: Third-Party Sync Tools

Tools like AOMEI Backupper, GoodSync, FreeFileSync, and Acronis True Image create scheduled, one-way or two-way sync jobs between any local folder and your OneDrive folder. The governing logic is that these tools copy files through the filesystem, so OneDrive only sees “new files appeared in my folder.” The consequence of misconfiguring bidirectional sync is a delete loop: delete a file on the external drive, the tool deletes it from OneDrive, OneDrive propagates the delete to other devices.

A real-world example is Lena, a biology PhD student at the University of Washington, who uses FreeFileSync to mirror lab data from a Seagate drive into her Microsoft 365 Education OneDrive every 15 minutes. A common misconception is that third-party sync counts against the Microsoft 365 storage quota twice; it does not. Files occupy cloud quota once, regardless of how they arrived.

Method 4: Robocopy Script + Task Scheduler

Robocopy, the built-in Windows command-line tool, plus Task Scheduler, gives power users a free, auditable mirror. The command robocopy E:\Work C:\Users\You\OneDrive\Work /MIR /Z /R:3 /W:5 mirrors the external drive into the OneDrive root on a schedule. The consequence of using /MIR without realizing it deletes extras at the destination is that accidental mirrors can wipe cloud files that are not present on the source drive.

A real-world example is David, an IT admin at a 40-person law firm in Atlanta, who runs nightly Robocopy jobs that move the paralegals’ external-scan drives into a shared OneDrive for Business library. A common misconception is that Robocopy preserves OneDrive-specific metadata like sharing permissions; it does not.

Method 5: Manual Upload via OneDrive Web

The simplest method is to open onedrive.live.com, drag files from the external drive into the browser window, and let the browser upload them. The rule here is the 250 GB per-file limit, which applies whether you upload from C:\ or E:. The consequence of browser timeout on very large uploads is that a 180 GB video file may fail halfway and require a restart.

A common misconception is that web uploads are “backups.” They are not; they are copies. Once uploaded, nothing on the external drive keeps syncing.

Three Realistic Scenarios

These scenarios show what happens when you apply the workarounds in practice.

OneDrive Tier Comparison for External Drive Use

Each OneDrive tier treats external drives the same way under the hood, but your options change based on quota, retention, and admin controls.

Personal vs. Business Retention

OneDrive Personal keeps file version history for 30 days, while OneDrive for Business allows admins to set retention from 7 days up to 10 years using Microsoft Purview retention labels. The consequence for a freelancer who accidentally deletes a file from an external drive on day 45 is that Personal cannot recover it, but Business Plan 2 can. A common misconception is that external-drive contents inherit the tier’s retention; they only inherit retention after the file reaches the cloud through sync.

Admin Controls That Change the Game

On Business and Education tenants, admins can enforce Intune configuration profiles that block users from relocating the OneDrive folder to removable media. The consequence for a user in such a tenant is that Method 1 above will fail with Group Policy error 0x80070005. A common misconception is that you can override this with a local admin account; modern Microsoft Entra ID conditional access rules enforce the block at sign-in.

Federal Law: What Your Backup Cannot Ignore

Once you push files from an external drive into any cloud, U.S. federal law may treat you as a data controller. Start with the four rules below, then layer on state statutes like CCPA or the New York SHIELD Act.

HIPAA

The Health Insurance Portability and Accountability Act requires covered entities to sign a Business Associate Agreement with Microsoft before any protected health information touches OneDrive. Microsoft only offers BAAs on Business, Enterprise, and Education tenants, not Personal or Family. The consequence of syncing PHI from a clinic’s external drive through a Personal OneDrive account is an automatic HIPAA violation with fines ranging from $137 to $68,928 per record under the 2024 HHS penalty tiers. A real-world example is a dental office in Tulsa that paid a $125,000 HHS settlement in 2023 for exactly this mistake. A common misconception is that encrypting the external drive alone satisfies HIPAA; it does not, because the BAA is the legal trigger.

GLBA and the FTC Safeguards Rule

The Gramm-Leach-Bliley Act and its implementing Safeguards Rule at 16 CFR Part 314 require financial institutions, including solo CPAs and mortgage brokers, to write and follow an information security program. The consequence of backing up client W-2 forms from a USB drive without MFA, encryption at rest, and a written plan is an FTC enforcement action with penalties up to $51,744 per violation. A real-world example is tax preparer James, a sole proprietor in Cleveland, who must document his OneDrive-plus-external-drive workflow in writing before any client data touches it. A common misconception is that firms under $10 million in revenue are exempt; the 2023 Safeguards Rule amendments apply to all financial institutions regardless of size.

SOX and Litigation Holds

Under Sarbanes-Oxley Section 802, public companies must retain audit-related records for seven years. The consequence of a Robocopy /MIR job that overwrites last quarter’s general-ledger exports is obstruction of justice exposure carrying up to 20 years in federal prison. A common misconception is that the cloud “version history” automatically satisfies SOX; it does not without a documented retention label.

FERPA

For schools, the Family Educational Rights and Privacy Act governs student records on Education tenants. The consequence of a teacher syncing grade books from a personal USB drive into a Personal OneDrive is a FERPA violation that risks the district’s Department of Education funding. A common misconception is that anonymized data escapes FERPA; indirect identifiers like photos still trigger it.

Concrete Examples With Named People

Three mini-scenarios show the mechanics end-to-end.

Sarah the wedding photographer: Sarah shoots 120 GB per wedding and stores RAW files on a 2 TB Samsung T7 Shield SSD. She uses Method 1, relocating the OneDrive folder to E:\OneDrive on her Microsoft 365 Family plan. Her goal is an off-site cloud mirror plus internal-drive space savings. Her consequence is that when she forgets to plug the SSD in for two weeks, OneDrive logs 400 “file missing” warnings but does not delete the cloud copies because she disabled “Files On-Demand” cleanup.

Mike the CPA: Mike keeps encrypted QuickBooks backups on a WD My Passport drive and uses Method 2 symlinks into his OneDrive for Business Plan 2 subscription. His goal is GLBA Safeguards Rule compliance with a documented off-site copy. The consequence is that his written security plan lists the symlink, the nightly Robocopy audit, and his signed Microsoft BAA, which satisfies an FTC records request.

Lena the PhD student: Lena syncs 400 GB of microscope images from a Seagate external drive into her University of Washington Microsoft 365 Education tenant using Method 3 with FreeFileSync. Her goal is FERPA-safe collaboration with her lab partners. The consequence of her workflow is version history retained by the university for seven years under a Purview retention label, which survives her graduation.

Mistakes to Avoid

Each mistake below causes a specific, measurable harm.

• Unplugging the external drive while sync is active, which corrupts the OneDrive database and forces a full resync that can take 24 to 72 hours on a 1 TB library.
• Using Robocopy /MIR without /XO, which overwrites cloud-only edits and destroys collaborator changes during every sync cycle.
• Letting Windows reassign the drive letter, which breaks symbolic links and marks every file as “location not available.”
• Syncing PHI through a Personal OneDrive account, which triggers automatic HIPAA fines starting at $137 per record.
• Ignoring the 250 GB per-file limit, which silently blocks 4K video masters and Adobe Premiere project bundles.
• Forgetting to sign a Microsoft Business Associate Agreement before uploading client medical files, which voids any HIPAA defense in a breach lawsuit.
• Trusting OneDrive version history as your sole retention tool, which fails under SOX Section 802 seven-year retention audits.
• Enabling bidirectional third-party sync without conflict rules, which creates delete loops that can wipe thousands of files in minutes.
• Relying on “Files On-Demand” with an external drive that disconnects often, which leaves placeholder files that cannot reopen.
• Skipping MFA on the OneDrive account, which violates the FTC Safeguards Rule and most cyber-insurance policies.

Do’s and Don’ts

These ten rules keep an external-drive workflow healthy.

• Do keep the external drive connected continuously while OneDrive is running, because intermittent connections cause database corruption.
• Do assign a fixed drive letter using Windows Disk Management, because Windows may otherwise reshuffle letters when new USB devices appear.
• Do enable BitLocker on the external drive, because the FTC Safeguards Rule requires encryption at rest for financial data.
• Do run a monthly chkdsk on the external drive, because NTFS errors silently corrupt files OneDrive will later upload.
• Do document your setup in writing, because every federal compliance rule demands evidence of controls.
• Don’t sync PHI without a signed BAA, because the first uploaded record triggers HIPAA liability.
• Don’t use Personal OneDrive for business records, because it lacks the audit logs required by SOX and GLBA.
• Don’t rely on web upload as a backup, because it never updates when source files change.
• Don’t ignore OneDrive error toasts, because dismissing “upload pending” warnings lets files go un-backed-up for weeks.
• Don’t share external-drive-synced folders with “Anyone with the link,” because that defeats HIPAA and FERPA access controls.

Pros and Cons

Pros

• Cloud redundancy protects against external-drive theft, fire, and mechanical failure.
• Bandwidth-only cost: no per-GB fees beyond your Microsoft 365 subscription.
• Version history recovers the last 30 days (Personal) or up to 10 years (Business).
• Cross-device access from phones, Macs, and OneDrive web.
• Built-in ransomware detection and File Restore rollback.

Cons

• Initial upload can take days over residential bandwidth, because OneDrive throttles for background sync.
• The 250 GB file cap blocks large video masters and forensic disk images.
• Symlink and mklink setups are unsupported by Microsoft Support.
• Sync pauses when the external drive disconnects, breaking any “set and forget” expectation.
• Subscription lapses immediately lock files in read-only mode, forcing emergency local copies.

Step-by-Step: Move the OneDrive Folder to an External Drive

Use these steps to execute Method 1 safely. Each step includes the consequence of skipping it.

1. Back up the current OneDrive folder elsewhere first, because the unlink step exposes files to accidental deletion.
2. Right-click the OneDrive cloud icon, choose Settings, then Account, then Unlink this PC, because the folder cannot move while linked.
3. In File Explorer, cut the C:\Users\You\OneDrive folder and paste it to E:\OneDrive, because OneDrive expects the exact folder name to re-bind.
4. Relaunch OneDrive from the Start menu and sign in, because re-linking is what triggers the path prompt.
5. At the “Your OneDrive folder” screen, click Change location, select E:\OneDrive, and confirm Use this folder, because default settings will recreate C:\ otherwise.
6. Click Next through the remaining screens and let OneDrive index, because interrupted indexing leaves files in a pending state.
7. Open Settings > Sync and backup > Advanced settings and set Files On-Demand behavior, because the wrong mode will redownload everything.
8. Verify in Task Manager that OneDrive.exe is running and that E:\OneDrive shows green cloud icons, because missing icons indicate an unfinished link.

Consequences of Each Choice

Choosing Files On-Demand “Save space” mode means cloud-only placeholders will live on E:\, so disconnecting the drive is safe but opening a file requires an internet connection. Choosing “Always keep on this device” means every file downloads fully to E:\, which fills the drive but works offline. A common misconception is that both modes behave the same when the drive disconnects; Save-space placeholders throw “file not available” errors, while Always-keep files open normally.

Key Entities You Should Know

• Microsoft Corporation: Publisher of OneDrive and signer of the BAA that enables HIPAA compliance.
• Windows Known Folder Move: The KFM feature that controls which folders OneDrive can back up.
• Microsoft Entra ID: The identity service that enforces conditional access rules on Business tenants.
• Microsoft Purview: The compliance portal where admins set retention labels that outlast the 30-day Personal limit.
• U.S. Department of Health and Human Services: The agency that enforces HIPAA penalties.
• Federal Trade Commission: The agency that enforces the Safeguards Rule against financial institutions.
• Securities and Exchange Commission: The regulator that enforces SOX Section 802 retention rules.
• Robocopy, FreeFileSync, AOMEI Backupper, Acronis True Image: Third-party tools that bridge external drives to OneDrive folders.

Relevant Rulings and Enforcement Actions

Federal case law and enforcement history shape how OneDrive-plus-external-drive setups are treated in court. In U.S. v. Anthem (2018), the insurer paid $16 million to HHS for PHI stored on unencrypted media, the largest HIPAA settlement on record. In the 2023 FTC action against Drizly, the Commission held the CEO personally liable for missing information-security controls, a precedent that now reaches small firms syncing customer data from external drives. Under Zubulake v. UBS Warburg (2003), federal courts established that failure to preserve electronic records triggers spoliation sanctions, which directly threatens any /MIR Robocopy script that overwrites evidence.

The consequence of ignoring these rulings is personal liability for owners and officers, not just the company. A common misconception is that an LLC shield protects solo operators; under Drizly and the FTC Safeguards Rule, it does not.

FAQs

Can OneDrive back up an external drive natively?

No. OneDrive’s PC Folder Backup only covers Desktop, Documents, and Pictures on the C: drive. External drives require manual workarounds such as folder relocation, symlinks, or third-party sync tools.

Does Microsoft 365 Family let me back up a USB drive?

No. The 6 TB pool is quota only. The sync engine still refuses to add external-drive paths to PC Folder Backup regardless of the subscription tier you pay for.

Can I move my OneDrive folder to an external SSD safely?

Yes. Unlink OneDrive, move the folder to the external drive, relaunch OneDrive, and select Change location during setup. Keep the drive connected continuously to avoid sync errors.

Will a symbolic link work for OneDrive external-drive backup?

Yes. An elevated mklink /D command redirects a OneDrive subfolder to the external drive. Microsoft does not officially support this, so you lose access to Microsoft Support if sync breaks.

Is OneDrive HIPAA compliant for external-drive health data?

Yes, only with a signed Business Associate Agreement on a Microsoft 365 Business, Enterprise, or Education tenant. Personal and Family plans are never HIPAA compliant.

Does OneDrive count external-drive files against my storage quota?

Yes, once they sync to the cloud. Files that sit only on the external drive without syncing do not consume quota.

Can I use Robocopy with OneDrive to back up an external drive?

Yes. Schedule robocopy jobs to mirror the external drive into your OneDrive folder. Avoid /MIR unless you fully understand that it deletes extras at the destination.

Will OneDrive delete my cloud files if I unplug the external drive?

No, not immediately. OneDrive pauses sync and shows “upload pending,” but prolonged disconnection plus certain settings can mark files for removal, so reconnect within a few days.

Can OneDrive back up a network-attached storage device?

No. OneDrive does not support NAS or mapped network drives as sync sources. Use a sync tool like FreeFileSync to bridge NAS content into a local OneDrive folder.

Is the 250 GB file limit waived for external-drive uploads?

No. The 250 GB per-file cap applies to every upload path, including web uploads, sync client uploads, and files arriving through symbolic links.

Can I back up a BitLocker-encrypted external drive to OneDrive?

Yes. OneDrive sees decrypted files once Windows unlocks the drive, so sync works normally. The drive must be unlocked for OneDrive to read files for upload.

Does OneDrive version history protect external-drive files?

Yes, for 30 days on Personal plans and up to 10 years on Business plans with Purview retention. The protection only applies after the file reaches the cloud.