Word: "The document is locked for editing by another user"
Hi, it's BlueByte. You go to open a Word file and instead of the document you get a dialog: the file is locked for editing by another user, offering only a read-only copy. Nothing is corrupted — Word found a lock for the document (an "owner file") and assumed someone else has it open. Often no one does. We'll walk through the exact message and its variants, the three reasons Word believes the file is in use, how to tell a real conflict from a stale lock, how to clear it safely, and how to keep it from sticking.
What "locked for editing by another user" actually says
The dialog names the file and the supposed owner:
The document "Budget.docx" is locked for editing by another user.
To open a read-only copy of this document, click Read Only.Variants you may see instead: File in use — <filename> is locked for editing by <user>, an Upload blocked badge on OneDrive or SharePoint, or on a mapped network drive simply This file is in use. They all mean the same thing — Word (or the sync client) sees a lock and won't let you edit until it's released. It is not a permissions error and not file corruption.
The three reasons Word thinks the file is in use
Microsoft's guidance lists three causes, and every case is one of them:
- A leftover owner file. Word creates a temporary owner file whenever you open a saved document, holding the name of whoever opened it. If Word crashed or was force-quit, it never deleted that file, so the lock outlives the session.
- A hidden second instance of Word is still running in the background with the document open — a
WINWORD.EXEprocess that didn't exit after you closed the window. - Someone genuinely has it open — the file is on a network share, OneDrive, or SharePoint and another person is editing it right now.
Only the third is a real conflict. The first two are stale locks: nothing is actually editing the file.
Tell a real conflict from a leftover lock
Don't kill processes blindly — check first. The owner file is a hidden file next to the document, named with a ~$ prefix. Microsoft's example: the owner file for Document.doc is ~$cument.doc — Word keeps the ~$ and trims the leading characters of the name, so match on the ~$ prefix rather than the exact spelling:
dir /a "C:\Users\you\Documents\~$*.doc*"If that lists a ~$… file while nobody is editing the document, the lock is stale. Next, check for a lingering Word process:
tasklist | findstr /i winwordA WINWORD.EXE line with no visible Word window is a hidden instance. If both come back empty and a colleague confirms the file is open on their machine, it's a real conflict — open read-only and wait rather than forcing anything.
Close every hidden Word process first
If the lock is stale, quit Word completely so nothing holds the file, then end any orphaned process:
taskkill /IM WINWORD.EXE /FSUCCESS: The process "WINWORD.EXE" with PID 8124 has been terminated.SUCCESS (or not found, meaning it was already gone) means no Word process is holding the document. Save any other open documents first — /F forces the process to close without prompting.
Delete the leftover owner file (~$)
With Word closed, remove the stale owner file by its ~$ name:
del "C:\Users\you\Documents\~$dget.docx"The command returns silently on success. Owner files are hidden, so if File Explorer doesn't show it, enable View ▸ Show ▸ Hidden items or use the del command above. Deleting the owner file is safe — it holds only the lock and the opener's name, never your document's contents.
A real case: Word crashed and left its lock behind
You're editing Budget.docx on a shared drive when Word freezes and you end it from Task Manager. You reopen the file and get locked for editing by another user — naming yourself. That's the tell: you are the "other user," from the crashed session. You run tasklist | findstr /i winword, see one stray WINWORD.EXE, and end it with taskkill /IM WINWORD.EXE /F. Then dir /a shows ~$dget.docx; you delete it with del. Reopening Budget.docx now goes straight to an editable document — the crash's lock is gone, and nothing was lost.
Check the document opens for editing again
Reopen the file. It should open editable, with no read-only banner and no lock dialog. Confirm the owner file is really gone:
dir /a "C:\Users\you\Documents\~$*.doc*"File Not FoundFile Not Found means the lock is cleared. If a fresh ~$ file appears the moment you open the document, that's expected — Word creates a new owner file for your session and deletes it when you close cleanly.
Keep the lock from sticking
Quit Word with File ▸ Close or by closing the window, not by killing it, so Word deletes its own owner file. For files several people touch, store them in OneDrive or SharePoint and turn on AutoSave — real co-authoring lets everyone edit at once instead of trading a single lock, which is what the "another user" message is really about on a plain file share. If Word crashes often, install the current updates; a repaired install stops leaving orphaned locks behind.
How this differs from "read-only" and "marked as final"
Locked for editing is an external lock — another session or a leftover owner file. That's different from a file whose read-only attribute is set (clear it with attrib -r file.docx), from Marked as Final (a property inside the document you clear under File ▸ Info ▸ Protect Document), and from Protected View, the yellow bar on files downloaded from the internet that you clear with Enable Editing. If there's no lock dialog and no owner file but you still can't type, you're looking at one of those, not a lock.
Related questions
The message names me as the "other user." Why?
A crashed or duplicate Word session opened the file under your name and never released its owner file, so the lock now points back at you. Close all Word processes and delete the ~$ owner file for that document.
I deleted the ~$ file but it's still locked.
Either a WINWORD.EXE is still running in the background, or someone genuinely has the file open on the share. Check with tasklist | findstr /i winword and end any stray process; if it's a real second person, wait for them to close it.
Is it safe to delete the owner file?
Yes. The ~$ owner file holds only the lock and the opener's logon name, never your document's contents. Delete it only when Word is fully closed and no one else is editing the document.
I can't see the ~$ file in the folder.
Owner files are hidden. Turn on View ▸ Show ▸ Hidden items in File Explorer, or list it from a command prompt with dir /a. For OneDrive or SharePoint files it sits in the local sync folder.
The file is on SharePoint or OneDrive and won't unlock.
That's a co-authoring lock, not a local owner file. Wait for the other editor to close it, or use Discard check-out on the file in the web view. Turning on AutoSave switches everyone to real co-authoring so no single lock forms.
References
Haneul Seo
Infrastructure engineer · 10+ years running Linux fleets
More in this category
Gmail rejects your mail with 550-5.7.26: unauthenticated email is not accepted due to the domain's DMARC policy
Gmail enforced the DMARC policy your own domain publishes: the message failed both SPF and DKIM alignment against the header From: domain, so a p=quarantine or p=reject policy turned it into a hard bounce. The Authentication-Results header names the failing check, and three dig queries against your SPF, DMARC and DKIM records name the cause. A near-identical bounce about authenticating with SPF or DKIM is a different problem — Gmail's baseline sender requirements, not your policy.
Microsoft Entra ID: AADSTS50011, the redirect URI specified in the request does not match the redirect URIs configured for the application
Sign-in completes and then Entra ID refuses the last hop, because the redirect_uri your app sent is not a byte-for-byte match for any URI registered on the app. The match is case-sensitive, counts the trailing slash, requires https outside localhost, and treats the port as significant everywhere except localhost. It also splits by platform: web, spa and publicClient are three separate lists, and URIs added to the service principal instead of the application object can disappear. Read the URI and the app ID out of the error, compare them with az ad app show, add the exact string with az ad app update or a Graph PATCH, then wait three to five minutes.
Exchange Online: 535 5.7.139 Authentication unsuccessful, SmtpClientAuthentication is disabled
A scanner, script or app that sends through smtp.office365.com gets 535 5.7.139 because the SMTP AUTH protocol is switched off for the tenant, for that mailbox, or by an authentication policy or security defaults that block Basic authentication. Read the wording (Tenant, Mailbox, or 'did not meet the criteria'), confirm with Get-TransportConfig, Get-CASMailbox and Get-AuthenticationPolicy, then open SMTP AUTH on the one mailbox that needs it rather than tenant-wide. Treat Basic SMTP AUTH as a bridge: Microsoft disables it by default for existing tenants at the end of December 2026, so move the sender to OAuth, High Volume Email or a relay connector.
Zoom: "Unable to connect" error code 5003 — the desktop app can't reach Zoom while the browser can
Error 5003 is the Zoom desktop app failing to complete its connection to Zoom's servers while the web client on the same machine joins fine. The app needs more than a browser does: Zoom's firewall article lists TCP 443/8801/8802 and UDP 3478/3479/8801–8810 for meetings, a set of CA hosts for certificate validation, and it asks that zoom.us and *.zoom.us be exempted from proxy or SSL inspection. A port test, a curl issuer check, and the app's built-in Network Connectivity Tool (Ctrl+Alt+Shift+D / Cmd+Option+Shift+D) show which of those is cut; fix that layer, and reinstall only when a single machine fails while its neighbours join.
Slack: "Slack cannot connect" and the grey "Last updated…" banner behind a corporate proxy
Slack loads channels over ordinary HTTPS but delivers new messages over a persistent WebSocket on port 443 to the three wss-*.slack.com hosts Slack names (primary, backup, mobile). When a proxy or firewall passes the HTTP side and blocks the upgrade — most often because SSL decryption is on for the wss hosts, or the allowlist stops at slack.com — the app shows the grey "Last updated…" banner or "Slack cannot connect." while the browser seems fine. Two curl probes from the affected machine show which layer is blocked; exempt the three wss hosts from decryption, allow every domain on my.slack.com/help/urls, and confirm with my.slack.com/help/test.
OneDrive: sync stuck — paused or a red X on the icon
A red circle with a white cross, or a paused status, on the OneDrive icon means the sync loop has stopped — your files are safe locally and in the cloud, but they aren't moving between them. Read the activity list to see whether it's the client or one bad file, then restart OneDrive, and reset it if a restart isn't enough. Resetting rebuilds the sync links and doesn't delete files.