Forum Discussion

valentyn1's avatar
valentyn1
Copper Contributor
Jan 20, 2025

Microsoft OneDrive has folder with only nums in it's name

So recently I started noticing SharePoint process in working in background. (I used procexp.exe app). I don't have SharePoint installed on my computer, so I clicked on it and looked it's path in properties. It took me to "Microsoft OneDrive" folder, but the process .exe file was in folder with a lot of nums in it's name. Name looks like a.b.c.d (a, b, c, d are some numbers)


So this folder has 2 folders with nums in the name, first one has only one file, while second has a lot more folders, dll files, some .exe and some other types, and the Microsoft.SharePoint.exe which is the process exe file I saw in procexp.

While I don't really use any Microsoft apps (I only use Word, where I have autosave option disabled). And, as I mentioned, I don't have SharePoint installed, so it's the only app with that name on my pc.

This program is signed by Microsoft, so I am sure it's not a malware.
So I have 2 questions:
1) What can this program do in my pc (procexp says it is in LISTENING mode) ?
2) How to disable it, or, at least, disable autostart?

Microsoft OneDrive
  • NikolinoDE's avatar
    NikolinoDE
    Gold Contributor
    Feb 02, 2025

    1. What Is This Process Doing on Your PC?

    The process you’re seeing, Microsoft.SharePoint.exe, is part of the Microsoft 365 ecosystem. Even if you don't actively use SharePoint, OneDrive integrates with it for collaboration and file sharing purposes.

    Folder with Numeric Names:
    The folder structure (like a.b.c.d) is typical for Microsoft apps, representing versioned directories where updates are managed.

    • Why It’s in LISTENING Mode:
      This is usually related to local network communication, not external connections. It helps apps like OneDrive sync files, manage permissions, and enable real-time collaboration. It’s common for:
      • Office document co-authoring
      • SharePoint/OneDrive sync
      • Local discovery services

     

    2. How to Disable or Control the Process

    Option A: Disable via Task Scheduler (Recommended)

    1. Press Win + R → Type taskschd.msc → Enter.
    2. Navigate to Task Scheduler Library > Microsoft > Office.
    3. Look for tasks related to SharePoint Sync or Office Background Tasks.
    4. Right-click → Disable.

     

    Option B: Disable OneDrive Integration

    If it’s tied to OneDrive’s collaboration features:

    1. Right-click the OneDrive icon in the system tray → Settings.
    2. Go to the Office tab (if available).
    3. Uncheck:
      • “Use Office applications to sync Office files that I open”
    4. Restart your PC.

     

    Option C: Use Windows Group Policy (For Advanced Users)

    1. Press Win + R → Type gpedit.msc → Enter.
    2. Navigate to:
      Computer Configuration → Administrative Templates → Microsoft Office → Miscellaneous
    3. Look for settings related to SharePoint or Background Services and disable them.

    (If you don’t see gpedit.msc, you may need Windows Pro or higher.)

     

    Option D: Disable Auto-Start (if it's a standalone service)

    1. Press Ctrl + Shift + Esc → Go to the Startup tab.
    2. Look for anything related to SharePoint, Microsoft 365, or OneDrive.
    3. Right-click → Disable.

    If not listed, check Services:

    • Press Win + R → Type services.msc
    • Find “Microsoft SharePoint” or “Office Background Task Handler” → Right-click → Properties → Startup type: Disabled.

    How to disable it or disable autostart? Add. Steps carefuly.

    Via Registry Editor:

    Press Win + R, type regedit, and press Enter.

    Navigate to HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive.

    If the OneDrive key doesn’t exist, create it.

    Create a new DWORD (32-bit) Value named DisableFileSyncNGSC and set its value to 1.

     

    Verify Network Activity (Optional, for Peace of Mind)

    Since it’s in LISTENING mode:

    1. Open Command Prompt as Administrator.
    2. Run:

    bash

    netstat -ano | findstr LISTENING

    1. Match the PID with the process in Task Manager to see if it’s only listening locally.

    (If it’s not making external connections, it’s likely safe.)

     

    Final Notes

    • Don’t delete the folders manually—this could break Office/OneDrive functionality.
    • These background processes are common, but if you’re security-conscious, disabling auto-start and monitoring network activity is the right approach.

    The text was created with the help of AI.

     

    My answers are voluntary and without guarantee!

     

    Hope this will help you.

     

    Was the answer useful? Mark as best response and like it!

    This will help all forum participants.

Resources