Dropbox to OneDrive migration
Migrate Dropbox files to OneDrive or SharePoint. Map team folders and permissions, handle Dropbox-native content separately, and verify the final file transfer.
Should you make this move?
Both platforms have a case. Compare what you gain with what you give up before scheduling the cutover.
Dropbox
- Fast, dependable desktop synchronization keeps file-based collaboration simple
- Managed sync, sharing, version history, and access controls reduce file-server work
- Knowledge, office-suite, and governance workflows are less integrated than broader suites
- Shared links, permissions, comments, and ownership models do not map cleanly
OneDrive
- Windows, Office, SharePoint, identity, and compliance integration suit Microsoft organizations
- Managed sync, sharing, version history, and access controls reduce file-server work
- Sync behavior and SharePoint-backed ownership can be confusing across teams
- Shared links, permissions, comments, and ownership models do not map cleanly
OneDrive: Windows, Office, SharePoint, identity, and compliance integration suit Microsoft organizations. This removes a major source-side concern: Knowledge, office-suite, and governance workflows are less integrated than broader suites.
What you lose: Fast, dependable desktop synchronization keeps file-based collaboration simple. What you inherit: Sync behavior and SharePoint-backed ownership can be confusing across teams.
Jump to a section
Know the shape of the move.
This timeline assumes
- Up to 5 TB, 2 million objects, and 1,000 users
- Administrators control both tenants and have approved user and group identity maps.
- The source remains read-only and licensed until object, version, link, and access checks pass.
- A representative user, shared container, and native-document set are migrated first.
- The migration team records evidence for every blocking verification check.
How do I transfer Dropbox to OneDrive?
Map personal and team folders to the appropriate OneDrive or SharePoint destinations, then pilot the transfer with representative files and users. Check paths, hashes, versions, and access. Handle Dropbox-native products and shared links separately. Freeze source edits for the final pass, reconcile changes, and keep a recoverable source archive through owner sign-off.
What survives the move.
“Partial” and “manual” are not footnotes. They are work that must be scheduled and verified.
| Item | Outcome | Impact | What happens | Mitigation |
|---|---|---|---|---|
| Files, folders, ownership, team folders, shares, and versions | partial | critical | Core files, folders, ownership, team folders, shares, and versions can move, but Dropbox and OneDrive use different models, limits, identifiers, and import behavior. | Pilot every feature class, preserve source IDs, and reconcile accepted, transformed, rejected, and excluded items. |
| Dropbox Paper, Replay, Transfer, Sign, shared links, and app integrations | manual | critical | Dropbox-native content and adjacent products do not become OneDrive files or Microsoft 365 workflows automatically. | Inventory every active dependency, approve its destination disposition, and test the replacement before source writes stop. |
| Files and folders | partial | critical | Core binaries and folders can move while unsupported names, sizes, paths, or object types are skipped. | Reconcile every source object to a destination object, exclusion, or approved archive. |
| Ownership and user identity | partial | critical | Ownership depends on a complete identity map and destination licenses. | Provision users first and explicitly assign orphaned content. |
| Sharing and permissions | partial | critical | Roles, inheritance, restricted children, groups, and external collaborators differ. | Apply and test a signed destination access matrix. |
| File versions | partial | high | Migration tools may omit versions, cap revisions, or increase duration substantially when versions are enabled. | Choose a retention depth and compare revision counts on a pilot. |
| Cloud-native documents | partial | critical | Provider-native documents may convert, flatten, export to office formats, or remain unsupported. | Classify and test every native document type before bulk migration. |
| Comments, tasks, and annotations | lost | high | Collaboration metadata rarely becomes destination-native history. | Resolve active work and archive required evidence. |
| Shared drives, team folders, and shortcuts | partial | critical | Container and link semantics do not map one-to-one. | Design target containers and detect duplicate or broken shortcut outcomes. |
| Public and external links | manual | critical | Existing URLs and link permissions do not remain stable. | Inventory critical links and notify owners of replacements. |
| Timestamps and metadata | partial | high | Created, modified, owner, classification, and custom metadata coverage varies. | Define required metadata and compare a stratified sample. |
| Retention, legal holds, and audit evidence | lost | critical | A productivity migration is not a compliance archive. | Export required evidence and obtain legal approval before source cleanup. |
Where each thing goes.
| Source | Destination | Method | Notes |
|---|---|---|---|
| Dropbox user or owner | OneDrive user or owner | manual | Provision and license identities before content. |
| Personal root | Destination personal root | transform | Keep source identity and path in the manifest. |
| Team folder or shared space | Destination shared container | manual | Approve ownership and membership first. |
| Folder | Folder | automatic | Validate path length, characters, and item limits. |
| File | File | automatic | Compare size and checksum. |
| Cloud-native document | Destination native or office document | transform | Record conversions and unsupported features. |
| Permission or collaboration | Destination access role | transform | Map role and inheritance explicitly. |
| Version | Destination revision or archive | transform | Apply the approved retention depth. |
| Shared link or shortcut | Destination link or shortcut | manual | Do not assume URL continuity. |
Make the move recoverable.
Create the source-of-truth backup
Preserve Dropbox data, configuration, and operating evidence before any destination write.
- Export Dropbox file, folder, owner, permission, link, version, metadata, and shared-container inventories.
- Download or archive every cloud-native and otherwise unsupported content class.
- Record counts, bytes, versions, owners, collaborators, external links, and legal holds.
- Hash raw manifests and representative binaries.
Proof to capture: A signed manifest reconciles every scoped record class, runtime dependency, export file, count, and hash.
Identity, container, and permission map
Preserve ownership and least-privilege access.
- Inventory source values and exceptions.
- Define explicit destination mappings.
- Reject unmapped critical records.
Proof to capture: Save the input, output, command or tool settings, warnings, and final item counts.
Object and native-document migration
Copy supported files and disposition every exception.
- Normalize encoding, dates, identifiers, and blanks.
- Run a representative pilot.
- Reconcile accepted, rejected, and transformed rows.
Proof to capture: Save the input, output, command or tool settings, warnings, and final item counts.
The things most likely to hurt.
These are operating limits. Treat every “Stop if” condition as a blocked migration, not a suggestion.
A completed job hides skipped or converted objects
Headline completion masks unsupported files, native documents, versions, or path errors.
- Consequence
- Users discover missing or altered work after cutover.
- Mitigation
- Reconcile every source object and exception.
Stop if: Any critical object lacks a destination, exclusion, or archive.
Permissions broaden during container conversion
Restricted children or external collaborators inherit unintended access.
- Consequence
- Confidential files are disclosed.
- Mitigation
- Apply and test a signed access matrix.
Stop if: An unauthorized test identity can open a restricted file.
Both tenants accept edits
Users or integrations update source and destination copies.
- Consequence
- File histories diverge.
- Mitigation
- Freeze source writers and apply one final delta.
Stop if: An unexplained post-freeze source change appears.
Do the work in this order.
- Days 1–3 · inventory
Inventory and decisions
6–12 hours active2–3 days elapsedOwner review waiting- Inventory Dropbox data, features, users, domains, and integrations.
- Approve scope, owners, mappings, and exclusions.
Depends on: Dropbox and OneDrive administrator access
Stop / go checkpointExport?
Go when: Every critical item has an owner and disposition.
Stop when: Consent, billing, access, or system ownership is unclear.
- Days 3–5 · backup
Backup and reconcile
5–10 hours active1–3 days elapsedExport processing waiting- Create immutable exports and configuration evidence.
- Reconcile counts, totals, and hashes.
Depends on: Approved inventory
Stop / go checkpointTransform?
Go when: Source totals and export manifests agree.
Stop when: Any critical dataset or configuration is absent.
- Days 5–12 · pilot
Map and pilot
10–35 hours active3–8 days elapsedDestination processing and review waiting- Configure OneDrive and transform representative data.
- Run a pilot containing normal records and every critical edge case.
Depends on: Verified backup
Stop / go checkpointScale?
Go when: Pilot mappings, behavior, access, and evidence pass.
Stop when: Any critical check fails or produces unexplained variance.
- Days 10–20 · cutover
Final delta and switch
5–25 hours active1–5 days elapsedDNS, import, or sync propagation waiting- Freeze production writes in Dropbox.
- Apply the final delta, switch ownership, and run blocking checks.
Depends on: Passed pilot and approved rollback
Stop / go checkpointOpen production?
Go when: Counts reconcile and one destination system owns production.
Stop when: A source writer remains active or a blocking check fails.
- Days 12–40 · observe
Observe and close
3–18 hours active3–10 days elapsedOperating-cycle evidence waiting- Monitor one complete operating cycle.
- Sign the verification report and close rollback only after stability.
Depends on: Verified cutover
Stop / go checkpointClose rollback?
Go when: No trigger occurs during the agreed observation period.
Stop when: Data, access, delivery, routing, or business results regress.
Cut over with a way back.
Cutover
Make OneDrive the only production system without losing the final Dropbox delta.
- Freeze production writes and scheduled actions in Dropbox.
- Export, transform, and reconcile the final delta.
- Apply the approved delta to OneDrive.
- Switch domains, forms, integrations, sending, or sync ownership as applicable.
- Run every blocking verification check and keep the source intact.
Proof to capture: OneDrive owns production, totals reconcile, and every blocking check has durable evidence.
Rollback
Return production ownership to Dropbox without losing destination-era changes.
- Stop new writes and scheduled actions in OneDrive.
- Restore the prior Dropbox routing, forms, integrations, sending, or sync ownership.
- Export the OneDrive post-cutover delta.
- Review and apply safe destination-era changes to Dropbox.
- Run the same blocking checks against the restored source.
Proof to capture: Dropbox again owns production with current data and no duplicate destination action.
- Unexplained critical count or value variance
- Missing or exposed critical data
- Duplicate production action
- Failed access, routing, delivery, or integration check
- A critical feature has no safe destination replacement
Prove the migration worked.
Every blocking check must pass. Capture the evidence before cleanup begins.
| Pass | ID | Check | Method | Expected result | Evidence |
|---|---|---|---|---|---|
V-01Blocking | File and folder reconciliation | Compare source, accepted, skipped, failed, and destination counts and bytes. | Every scoped object is accounted for. | Object ledger. | |
V-02Blocking | Binary parity | Compare checksums and sizes for a stratified and critical-file set. | Every tested binary matches. | Checksum report. | |
V-03Blocking | Conversion fidelity | Open every source-native type and exercise required features. | Meaning and critical behavior are preserved or archived. | Conversion matrix. | |
V-04Blocking | Revision coverage | Compare approved version counts and timestamps. | Retention depth matches the signed policy. | Version report. | |
V-05Blocking | Ownership mapping | Query active, inactive, group, and orphaned owners. | Every object has an approved owner. | Ownership ledger. | |
V-06Blocking | Internal and external permissions | Test representative identities and shared links. | Least privilege matches the signed matrix. | Access evidence. | |
V-07Blocking | Shortcut and embedded-link behavior | Exercise critical links from documents and integrations. | Every critical reference resolves or has a replacement. | Link report. | |
V-08Blocking | Single file authority | Inspect sync clients, integrations, and source changes. | OneDrive alone accepts approved edits. | Cutover checklist. |
Remove the scaffolding safely.
Safe after: One complete operating cycle, at least seven stable days, and owner sign-off on every blocking check.
- Create final Dropbox exports and archive verification evidence.
- Revoke temporary credentials, API keys, webhooks, and elevated roles.
- Remove obsolete embeds, forms, jobs, integrations, and DNS records.
- Keep the source intact through the approved retention window.
- Cancel paid plans only after billing, legal, and recovery review.
- Schedule the next OneDrive backup, access, and migration-playbook review.
Verify against the primary material.
Platform behavior changes. Check these sources and the review dates above before executing a production migration.
- Dropbox: official migration documentationAccessed 2026-07-19
- OneDrive: official migration documentationAccessed 2026-07-19