Onedrive Personal Vault issue

Suspected Bug
1

What is the problem you are having with rclone?

Syncing Onedrive to a pc, leads to an error referencing the onedrive personal vault:

ERROR : Personal Vault: error reading source directory: couldn't list files: invalidRequest: invalidResourceId: ObjectHandle is Invalid

Previously this sync was working fine, last week one onedrive account started having this issue, now today a 2nd seperate onedrive account has started having this issue.

I wonder if Microsoft is rolling out an API update that is exposing the personal vault folder via the API, but that is causing an issue with rclone?

Run the command 'rclone version' and share the full output of the command.

rclone v1.70.2

  • os/version: Microsoft Windows 11 Pro 24H2 24H2 (64 bit)
  • os/kernel: 10.0.26100.4652 (x86_64)
  • os/type: windows
  • os/arch: amd64
  • go/version: go1.24.4
  • go/linking: static
  • go/tags: cmount

Which cloud storage system are you using? (eg Google Drive)

Onedrive

The command you were trying to run (eg rclone copy /tmp remote:tmp)

Rclone sync $RCLONESOURCE $RCLONETARGET --config=$RCLONECONFIG --verbose --transfers=6 --create-empty-src-dirs --retries=5 --retries-sleep=30s --max-duration=1h39m --cutoff-mode=hard

The rclone config contents with secrets removed.

[OneDrive_REDACTED_READ-ONLY]
type = onedrive
access_scopes = Files.Read Files.Read.All Sites.Read.All offline_access
token = REDACTED
drive_id = REDACTED
drive_type = personal
2

hi,

maybe a recent update of rclone might be the issue?
what was the version of rclone that worked?

3

I've also been getting this error message for the past few days, though I can't tell whether it's causing any real problem.
I was on rclone version 1.66 (or possibly 1.67) and updated to 1.70.3 to see if that helped - it didn't.
Also added

--exclude='/Personal Vault/**'

to the rclone sync command, but that made no difference either.

INFO log messages include:

2025/07/11 21:17:56 ERROR : Personal Vault: error reading source directory: couldn't list files: invalidRequest: invalidResourceId: ObjectHandle is Invalid

2025/07/12 01:12:19 ERROR : Local file system at /volume1/BackupOfOneDrive - I: not deleting files as there were IO errors
2025/07/12 01:12:19 ERROR : Local file system at /volume1/BackupOfOneDrive - I: not deleting directories as there were IO errors
2025/07/12 01:12:19 ERROR : Attempt 3/3 failed with 1 errors and: couldn't list files: invalidRequest: invalidResourceId: ObjectHandle is Invalid
2025/07/12 01:12:19 INFO  : 
Transferred:   	   16.833 MiB / 16.833 MiB, 100%, 338.396 KiB/s, ETA 0s
Errors:                 1 (retrying may help)
Checks:           1149131 / 1149131, 100%, Listed 2564348
Renamed:                6
Transferred:           49 / 49, 100%
Server Side Moves:      6 @ 12.472 MiB
Elapsed time:   3h54m23.6s
2025/07/12 01:12:19 NOTICE: Failed to sync: couldn't list files: invalidRequest: invalidResourceId: ObjectHandle is Invalid
4

Interesting, I've been experiencing this also, however adding --exclude='/Personal Vault/**' has worked around the problem for me. What was the exact command you used?

5 
rclone sync \
<OneDrive-source> <NAS-target> \
--backup-dir <NAS-target-OldFiles> --suffix " - "`date "+%Y%m%d-%H%M%S"` --suffix-keep-extension \
--exclude <TroublesomeFile1> \
--exclude <TroublesomeFile2> \
--exclude='/Personal Vault/**' \
--log-level INFO
6

ok, good to know.

i have been using rclone with onedrive for 5+ years.
rclone lsd onedrive has never listed Personal Vault folder

i just logged into the onedrive onedrive, confirmed Personal Vault folder does exist and has a file in it.

so i think microsoft is making changes to their backend incrementally only on some accounts.
if you search the forum, microsoft has been making changes to onedrive personal and in some cases, has affected some rclone users, but not all.

7

Yes. This is the case and it does not help in any troubleshooting. I do not have this issue yet for example.

8

The Personal Vault directory has existed in onedrive personal for a long time. I've never put a file into the vault from the onedrive website nor the android app although I remember it prompting me about it a long time ago.

I'm still using v1.69.0 and rclone lsd OneDriveSweharris: does include Personal Vault in the results. I don't recall if it's shown in the past 'cos I don't do that very often. I never use rclone to sync to the top of the tree, so I dunno if that older version would have caused problems if I had!

1 Like
9

me too. only after reading this topic, as a test, i added a file and unlocked the folder.

i just tested v.1.68.0, same result as latest, that rclone lsd does not include Personal Vault in the results.

10

Hmm, of the 4 drives I've got configured, 2 show the vault and 2 don't. Yay consistency! I see a vault entry on the onedrive site for all of them.

Hmm, looking at --dump headers output from the drives and there's nothing to distinguish them (with previous backend changes it was easy to see stuff based on timestamp precision and other stuff).

The only "real" difference is in X-Ms-Ags-Diagnostic: and even there all 4 drives are in the same datacenter/slice/ring; the scaleunit is different on all and the roleinstance is different. So not useful!

11

I just added:

--exclude='/Personal Vault/**'

To my Onedrive scripts and can confirm that this removes the error message on two separate OneDrive accounts.

In case its a useful datapoint, one of the OneDrive accounts has files stored in the personal vault. The other ones doesn't.

1 Like
12

I had the exact same issue as described in the first post and reached the solution by doing just what is proposed.

--exclude='/Personal Vault/**'

Usually, this folder requieres a second level authentication to access. Also noticed that I have this issue with some accounts, and some others are still working without any issue.
Agree there could be some slight change from the Microsoft API.

13

I can confirm this on rclone v1.67.0, the one that ships with Truenas Scale 25.04.1.

The rclone job started failing without any configuration or version changes.

Adding "/Personal Vault/**" to the exclude params as suggested fixed it.

14

Hi @Vanburen and all,

Microsoft has definitely made some changes and I had to create an account at the Microsoft Azure. Inside that account I was able to create a new client ID secret and one other entry and after that I'm getting great performance out of my one personal OneDrive.

It's not easy or obvious through the Microsoft site but if you go into azure you'll be able to if you can figure it out create a new client ID and secret that follows their new apis.

15

Just to round this off: I eventually managed to get rid of the error message too - after trying umpteen other things it turned out it was just a missing space in my command line which was causing the

--exclude='/Personal Vault/**'

parameter to be missed.
Thanks all!

1 Like
16

I've just raised this as an issue in GitHub at OneDrive Personal Vault triggers "ObjectHandle is Invalid" errors · Issue #8736 · rclone/rclone

17

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.