OneDrive for Business sharing entire drive when trying to share one specific sub folder

%3CLINGO-SUB%20id%3D%22lingo-sub-327126%22%20slang%3D%22en-US%22%3EOneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327126%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERecently%20several%20colleagues%20encountered%20the%20issue%20of%20OneDrive%20for%20Business%20sharing%20one's%20ENTIRE%20OneDrive%20root%20folder%20when%20merely%20trying%20to%20share%20a%20specific%20sub%20folder.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EDoes%20anyone%20know%20how%20this%20is%20possible%20and%20how%20it%20can%20be%20prevented%20on%20an%20admin%20level%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance!%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-327126%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAdmin%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOneDrive%20for%20Business%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-328004%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-328004%22%20slang%3D%22en-US%22%3EYeah%2C%20but%20it%20should%20be%20possible%20though%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327997%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327997%22%20slang%3D%22en-US%22%3E%3CP%3EI%20think%20this%20particular%20%22bug%22%20is%20more%20prone%20to%20slow%20computers%20and%2For%20click%20happy%20end%20users.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327484%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327484%22%20slang%3D%22en-US%22%3EBy%20any%20chance%20used%20the%20classic%20UI%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327483%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327483%22%20slang%3D%22en-US%22%3EThanks%20for%20this!%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327476%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327476%22%20slang%3D%22en-US%22%3E%3CP%3EI%20spotted%20this%20bug%20back%20in%20June%202015%20and%20recorded%20a%20screen%20capture%20of%20the%20steps%20to%20reproduce%20it.%26nbsp%3B%20(Here's%20the%20video%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fyoutu.be%2FMHD7XXuDCtA%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fyoutu.be%2FMHD7XXuDCtA%3C%2FA%3E)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20reproduced%20it%20today%20using%20the%20classic%20UI%20in%20OneDrive%20for%20Business%2C%20but%20I%20couldn't%20produce%20it%20in%20the%20modern%20UI.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EEssentially%2C%20you%20select%20to%20share%20a%20file%20or%20folder%20and%20while%20the%20details%20pop%20up%20is%20open%2C%20you%20unselect%20the%20file%20--%20and%20then%20click%20%22share%22.%26nbsp%3B%20Instead%20of%20sharing%20a%20file%2Ffolder%2C%20you're%20sharing%20the%20entire%20document%20library.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327310%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327310%22%20slang%3D%22en-US%22%3EGeez!%20If%20they%20get%20acces%20to%20the%20entire%20root%20folder%20create%20a%20ticket%20for%20it%20and%20work%20it%20out%20with%20MS!!%20Keep%20us%20posted!%3CBR%20%2F%3E%3CBR%20%2F%3EAdam%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327298%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327298%22%20slang%3D%22en-US%22%3EBoth%20users%20weren't%20administrators%20nor%20did%20they%20have%20elevated%20rights%20in%20any%20root%20folder.%20The%20invitations%20received%20by%20the%20users%20displayed%20granted%20access%20to%20the%20root%20folder%20and%20not%20to%20the%20specific%20subfolder%20(which%20is%20in%20line%20with%20the%20granted%20rights).%3CBR%20%2F%3E%3CBR%20%2F%3EI'm%20trying%20to%20replicate%20the%20issue%20and%20will%20provide%20some%20pictures%20soon.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327251%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327251%22%20slang%3D%22en-US%22%3E%3CP%3EYeah%2C%20if%20this%20really%20happens%20and%20also%20there%20is%20no%20permissions%20set%20for%20that%20user%2C%20this%20is%20a%20major%20bug!%20Can%20you%20please%20post%20some%20pictures%20if%20possible%20of%20the%20experience%20also%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%2F%20Adam%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327247%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327247%22%20slang%3D%22en-US%22%3EYeah%20Adam%20brings%20up%20a%20good%20point%20about%20someone%20having%20access%20already%20to%20their%20onedrive%20then%20they%20get%20a%20shared%20link%20and%20see%20everything.%20Something%20doesn't%20add%20up.%20Not%20saying%20this%20couldn't%20be%20a%20bug%2C%20but%20def.%20needs%20some%20more%20investigating%20to%20rule%20out%20any%20odd%20script%20that%20could%20have%20run%2C%20or%20the%20user%20doing%20user%20type%20things%20%3AP.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327246%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327246%22%20slang%3D%22en-US%22%3E%3CP%3ESo%2C%20you%20mean%20the%20shared%20with%20user%20now%20can%20access%20the%20entire%20OneDrive%20folder%3F%20What%20does%20the%20experience%20look%20like!%20Is%20the%20correct%20folder%20shown%20in%20the%20mail%20and%20in%20the%20%22shared%20with%20me%22%2F%22shared%20by%20me%22%22%20folder%20in%20the%20users%20OneDrive%20webclient%3F%3C%2FP%3E%3CP%3EIf%20so%2C%3C%2FP%3E%3CP%3EAlso%20verify%20permissions%20on%20the%20users%20OneDrive%20in%20SharePoint!%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3E%3CA%20href%3D%22https%3A%2F%2Fwww.petri.com%2F4-ways-add-secondary-administrator-onedrive-business%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fwww.petri.com%2F4-ways-add-secondary-administrator-onedrive-business%3C%2FA%3E%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3EIs%20the%20users%20who%20shared%20the%20folder%20the%20only%20owner%3F%3C%2FFONT%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CFONT%3E%2F%20Adam%3C%2FFONT%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327244%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327244%22%20slang%3D%22en-US%22%3EI%20understand%20the%20point%20you're%20making%20regarding%20sharing%20your%20entire%20OneDrive.%20The%20problem%20(or%20bug)%20consist%20of%20OneDrive%20sharing%20the%20root%20folder%20when%20a%20user%20is%20only%20trying%20to%20share%20one%20specific%20subfolder%20or%20file.%3CBR%20%2F%3E%3CBR%20%2F%3EIn%20the%20case%20of%20a%20folder%20placed%20directly%20in%20the%20OneDrive%20root%20folder%2C%20one's%20entire%20OneDrive%20is%20effectively%20shared.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-327220%22%20slang%3D%22en-US%22%3ERe%3A%20OneDrive%20for%20Business%20sharing%20entire%20drive%20when%20trying%20to%20share%20one%20specific%20sub%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-327220%22%20slang%3D%22en-US%22%3EYou%20can't%20Share%20your%20entire%20drive%2C%20there%20is%20no%20Share%20button%20available%20at%20the%20root.%20The%20only%20way%20to%20share%20it%20is%20to%20go%20out%20of%20your%20way%20and%20go%20to%20site%20settings%20and%20explicitly%20give%20someone%20access%20to%20your%20OneDrive%20site%20as%20a%20whole.%20%3CBR%20%2F%3E%3CBR%20%2F%3EYour%20best%20bet%20in%20this%20case%20is%20user%20education%20since%20there%20is%20no%20way%20to%20prevent%20this%20that%20I'm%20aware%20of.%3C%2FLINGO-BODY%3E
Highlighted
New Contributor

Hi,

 

Recently several colleagues encountered the issue of OneDrive for Business sharing one's ENTIRE OneDrive root folder when merely trying to share a specific sub folder.

 

Does anyone know how this is possible and how it can be prevented on an admin level?

 

Thanks in advance!

12 Replies
Highlighted
You can't Share your entire drive, there is no Share button available at the root. The only way to share it is to go out of your way and go to site settings and explicitly give someone access to your OneDrive site as a whole.

Your best bet in this case is user education since there is no way to prevent this that I'm aware of.
Highlighted
I understand the point you're making regarding sharing your entire OneDrive. The problem (or bug) consist of OneDrive sharing the root folder when a user is only trying to share one specific subfolder or file.

In the case of a folder placed directly in the OneDrive root folder, one's entire OneDrive is effectively shared.
Highlighted

So, you mean the shared with user now can access the entire OneDrive folder? What does the experience look like! Is the correct folder shown in the mail and in the "shared with me"/"shared by me"" folder in the users OneDrive webclient?

If so,

Also verify permissions on the users OneDrive in SharePoint!

 

https://www.petri.com/4-ways-add-secondary-administrator-onedrive-business

 

Is the users who shared the folder the only owner?

 

/ Adam

Highlighted
Yeah Adam brings up a good point about someone having access already to their onedrive then they get a shared link and see everything. Something doesn't add up. Not saying this couldn't be a bug, but def. needs some more investigating to rule out any odd script that could have run, or the user doing user type things :P.
Highlighted

Yeah, if this really happens and also there is no permissions set for that user, this is a major bug! Can you please post some pictures if possible of the experience also

 

/ Adam

Highlighted
Both users weren't administrators nor did they have elevated rights in any root folder. The invitations received by the users displayed granted access to the root folder and not to the specific subfolder (which is in line with the granted rights).

I'm trying to replicate the issue and will provide some pictures soon.
Highlighted
Geez! If they get acces to the entire root folder create a ticket for it and work it out with MS!! Keep us posted!

Adam
Highlighted

I spotted this bug back in June 2015 and recorded a screen capture of the steps to reproduce it.  (Here's the video: https://youtu.be/MHD7XXuDCtA)

 

I reproduced it today using the classic UI in OneDrive for Business, but I couldn't produce it in the modern UI.

 

Essentially, you select to share a file or folder and while the details pop up is open, you unselect the file -- and then click "share".  Instead of sharing a file/folder, you're sharing the entire document library.

I first spotted this bug in June 2015 and I confirmed today (1/29/2019) that it is still there in the classic UI.
Highlighted
Highlighted
Highlighted

I think this particular "bug" is more prone to slow computers and/or click happy end users.

Highlighted
Yeah, but it should be possible though