OneDrive: sync stuck — paused or a red X on the icon
Hi, it's BlueByte. Your OneDrive stops syncing: the icon shows a red circle with a white cross, or it sits on Paused, and edits you make locally never reach the cloud. Nothing is deleted — OneDrive has stopped the sync loop and is waiting. We'll walk through what the icon states mean, why sync stalls, how to read the activity list to find the reason, restart or reset the client to clear it, and how to keep it running.
What a paused sync or a red X on the icon means
OneDrive shows its health in the tray (Windows) or menu-bar (Mac) icon. A red circle with a white cross means a sync error — one or more files can't sync. A pause symbol means sync is paused, by you or automatically (a metered network, battery saver). A grey icon with "Sign in" means the account isn't connected. None of these is data loss: your files are intact both locally and in the cloud; only the link between them is stalled.
Why OneDrive stops syncing
A stalled sync comes from one of a few causes:
- Sync was paused — by you, or automatically on a metered or low-battery connection.
- The account signed out or its token expired, so the client can't reach the service.
- You're over quota — Microsoft is explicit that if you exceed your storage you can't upload, edit, or sync new files.
- A file it can't sync — a name with an unsupported character, a path over the length limit, or a file locked open by another program — stalls the queue behind it.
- A wedged client — the OneDrive process is running but stuck, common after a network drop or an update.
Read the icon and the activity list before you touch anything
Don't reset first — look at what OneDrive is telling you. Select the OneDrive icon to open the activity centre; a sync error lists the exact files it's stuck on and why. Check the process is even running:
Get-Process OneDrive -ErrorAction SilentlyContinueNo output means OneDrive isn't running — start it from the Start menu. If it's running but the icon is red, note whether the error names specific files (a quota or bad-name problem) or everything (a connection or client problem). That split decides your fix.
Restart OneDrive — the fix that clears most stalls
For a wedged client, quit and relaunch it. Close it, then start it again:
Stop-Process -Name OneDrive -Force
Start-Process "$env:LOCALAPPDATA\Microsoft\OneDrive\onedrive.exe"Give it a minute; the icon should go from red or paused to the plain "up to date" cloud. A restart re-establishes the connection and re-runs the queue, which clears most stalls left by a network blip or an update.
Reset OneDrive when a restart isn't enough
If a restart doesn't clear it, reset the sync connections. This is Microsoft's documented step, and it does not delete your files — it disconnects and rebuilds the sync links only. Press Win + R and run the path that matches your install:
%localappdata%\Microsoft\OneDrive\onedrive.exe /resetIf that path reports the file isn't found, use the Program Files locations instead:
C:\Program Files\Microsoft OneDrive\onedrive.exe /reset
C:\Program Files (x86)\Microsoft OneDrive\onedrive.exe /resetThe icon disappears for a minute or two while OneDrive rebuilds, then returns and runs a full sync. If it doesn't reappear on its own, start OneDrive again from the Start menu. After a reset you may need to re-choose which folders to sync.
When it's quota or a bad file name, not a stall
If the activity list names specific files, a client reset won't help — fix the cause. For over quota, free space or reduce what you sync; you can't sync new files until you're back under the limit. For a file OneDrive won't accept, rename it to drop unsupported characters (" * : < > ? / \ |) or shorten an over-long path, then let it re-queue. One rejected file can hold up everything behind it, so clearing it often unblocks the whole queue.
A real case: sync paused after a network blip
You're on a laptop that dropped Wi-Fi on a train. Back online, OneDrive shows the red X and "We can't sync right now." The activity centre lists no specific file, so it's the client, not a file. You run Stop-Process -Name OneDrive -Force and relaunch it — still red. You reset with %localappdata%\Microsoft\OneDrive\onedrive.exe /reset; the icon vanishes, rebuilds over about a minute, and comes back running a full sync. Within a few minutes it settles on the plain "up to date" cloud, and the edits you made offline upload. No file was lost — the reset only rebuilt the connection.
Confirm sync is caught up
Watch the icon settle to the "up to date" state — a plain cloud, no red, no pause. Open the activity centre and confirm it reads that everything is synced, with no error list. As a direct check, edit a small file in the synced folder and confirm the change appears on onedrive.com within a moment — that proves the loop is live end to end.
Keep sync running, and how this differs from "path too long"
Keep OneDrive updated, stay under quota, and don't force-quit it — let it close cleanly so it doesn't come back wedged. If you sync on metered connections, check that pause-on-metered isn't stopping you unexpectedly. And note the difference from a "path too long" failure: that error names one file whose full path exceeds the limit and blocks only that file, and the fix is to shorten the path, not to reset the client. A general red-X stall with no named file is the client or the connection, and a reset clears that; a single stubborn file is a per-file problem you fix on the file itself.
Related questions
Will I lose files if I reset OneDrive?
No. Microsoft states that resetting only disconnects your sync connections; your files stay in the cloud and on disk. After the reset you may need to re-choose which folders to sync, but nothing is deleted.
The OneDrive icon didn't come back after the reset.
Start OneDrive from the Start menu. The reset stops the process and rebuilds it, but it doesn't always relaunch itself, so the icon can stay missing until you start it.
Sync is stuck on one file.
Open the activity centre to see which file. Rename it to remove unsupported characters, shorten an over-long path, or close the program that has it open; the queue behind it then moves. A client reset won't fix a single-file problem.
Everything's paused and won't resume.
Sync may be paused for a metered connection or battery saver. Select the icon, choose Resume syncing, and check settings for a pause-on-metered option that keeps re-triggering it.
Which reset path do I use?
Try the %localappdata% path first. If it reports the file isn't found, use the Program Files or Program Files (x86) path instead. All three are Microsoft's documented locations for different OneDrive installs.
References
Haneul Seo
Infrastructure engineer · 10+ years running Linux fleets
More in this category
Gmail rejects your mail with 550-5.7.26: unauthenticated email is not accepted due to the domain's DMARC policy
Gmail enforced the DMARC policy your own domain publishes: the message failed both SPF and DKIM alignment against the header From: domain, so a p=quarantine or p=reject policy turned it into a hard bounce. The Authentication-Results header names the failing check, and three dig queries against your SPF, DMARC and DKIM records name the cause. A near-identical bounce about authenticating with SPF or DKIM is a different problem — Gmail's baseline sender requirements, not your policy.
Microsoft Entra ID: AADSTS50011, the redirect URI specified in the request does not match the redirect URIs configured for the application
Sign-in completes and then Entra ID refuses the last hop, because the redirect_uri your app sent is not a byte-for-byte match for any URI registered on the app. The match is case-sensitive, counts the trailing slash, requires https outside localhost, and treats the port as significant everywhere except localhost. It also splits by platform: web, spa and publicClient are three separate lists, and URIs added to the service principal instead of the application object can disappear. Read the URI and the app ID out of the error, compare them with az ad app show, add the exact string with az ad app update or a Graph PATCH, then wait three to five minutes.
Exchange Online: 535 5.7.139 Authentication unsuccessful, SmtpClientAuthentication is disabled
A scanner, script or app that sends through smtp.office365.com gets 535 5.7.139 because the SMTP AUTH protocol is switched off for the tenant, for that mailbox, or by an authentication policy or security defaults that block Basic authentication. Read the wording (Tenant, Mailbox, or 'did not meet the criteria'), confirm with Get-TransportConfig, Get-CASMailbox and Get-AuthenticationPolicy, then open SMTP AUTH on the one mailbox that needs it rather than tenant-wide. Treat Basic SMTP AUTH as a bridge: Microsoft disables it by default for existing tenants at the end of December 2026, so move the sender to OAuth, High Volume Email or a relay connector.
Zoom: "Unable to connect" error code 5003 — the desktop app can't reach Zoom while the browser can
Error 5003 is the Zoom desktop app failing to complete its connection to Zoom's servers while the web client on the same machine joins fine. The app needs more than a browser does: Zoom's firewall article lists TCP 443/8801/8802 and UDP 3478/3479/8801–8810 for meetings, a set of CA hosts for certificate validation, and it asks that zoom.us and *.zoom.us be exempted from proxy or SSL inspection. A port test, a curl issuer check, and the app's built-in Network Connectivity Tool (Ctrl+Alt+Shift+D / Cmd+Option+Shift+D) show which of those is cut; fix that layer, and reinstall only when a single machine fails while its neighbours join.
Slack: "Slack cannot connect" and the grey "Last updated…" banner behind a corporate proxy
Slack loads channels over ordinary HTTPS but delivers new messages over a persistent WebSocket on port 443 to the three wss-*.slack.com hosts Slack names (primary, backup, mobile). When a proxy or firewall passes the HTTP side and blocks the upgrade — most often because SSL decryption is on for the wss hosts, or the allowlist stops at slack.com — the app shows the grey "Last updated…" banner or "Slack cannot connect." while the browser seems fine. Two curl probes from the affected machine show which layer is blocked; exempt the three wss hosts from decryption, allow every domain on my.slack.com/help/urls, and confirm with my.slack.com/help/test.
Word: "The document is locked for editing by another user"
Word found a lock — an owner file — for the document and assumed someone else has it open, so it offers only a read-only copy. Usually no one does: a crash left the lock behind, or a hidden Word process is still holding the file. Confirm which, close every Word instance, delete the stale ~$ owner file, and the document opens for editing again.