After some test, we found out that when download a file, delete the online file and place the file back with the same name, the file could be opened without issues. Looks like the Meta data of the file is corrupted.<\/p>\n\n\n\n
Ok. Now I have a solution, but how to do this with 50 GB of data and over 40.000 files to check.
Then found 2 ways, Connect the Sharepoint to a Onedrive. and do the local copy job. “Download” the files, Move it outside Sharepoint or on a new Sharepoint folder. But when you are doing this, there are some negative points.<\/p>\n\n\n\n
- \n
- Downloading and Uploading costs a lot of time<\/li>\n\n\n\n
- Owner name \/ last modified name is changed.<\/li>\n\n\n\n
- Version history is lost.<\/li>\n\n\n\n
- Data is temporary not available.<\/li>\n<\/ul>\n\n\n\n
Based on the points above it was not the good way.<\/p>\n\n\n\n
The other way maybe better. A Powershell script that connects to Sharepoint online, and do a move internally in Sharepoint online. This is the best way to skip all the negative points above.<\/p>\n\n\n\n
Now its clear what to do, because I’m admin of the tenant but I don’t have a system in that tenant, and I don’t want to use my own system, I created a Hyper-V VM on my own system.
Installed the Default Windows 11 Image from Microsoft on the VM.<\/p>\n\n\n\nNow I’m trying to sign in with a test account on that system. Mm, that’s not working. Found out that system is blocked by Intune policy (Enrollment restriction) that don’t allow Personally owned devices to add the the tenant.<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-1.png?resize=640%2C299&ssl=1\")
<\/figure>\n\n\n\nExample above.<\/p>\n\n\n\n
I created a new Enrollment restriction what is automatically placed above the default restriction. And add only personally owned to allow.
Added a new AAD group and add the test account in it. Added the AAD group to the new Enrollment restriction policy. Now waited 5 minutes and tried again. Finally signed in is working.<\/p>\n\n\n\nNext step. Install PnP.PowerShell module.<\/p>\n\n\n\n
Start Powershell as Admin on the system. and type the following command to install the module.<\/p>\n\n\n\n
Install-Module PnP.PowerShell -Scope CurrentUser -Force<\/code><\/pre>\n\n\n\nWhen you get the message about NuGet update. Press Y<\/strong> and enter<\/strong>.
<\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-3.png?w=640&ssl=1\")
<\/figure>\n\n\n\nType <\/p>\n\n\n\n
Get-Module PnP.PowerShell -ListAvailable<\/code><\/pre>\n\n\n\nYou should get info about what module is installed.
On the default Windows 11 25h2 Powershell 5.1 is installed and wont give any output about the module that is installed.<\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-4.png?w=640&ssl=1\")
<\/figure>\n\n\n\nIssue here is the PnP.Powershell module is working on minimal PowerShell 7.4.0.
So first we need to update Powershell to the latest. Easy way to update is trough Winget.<\/p>\n\n\n\nType in the current powershell window the following command to install the latest Powershell version<\/p>\n\n\n\n
winget install --ID Microsoft.PowerShell --Source winget<\/code><\/pre>\n\n\n\nNow is PowerShell Automatic installed.<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-5.png?w=640&ssl=1\")
<\/figure>\n\n\n\nClose current Powershell (5.1)<\/p>\n\n\n\n
Open the new Powershell 7 (x64) as Admin.<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-6.png?w=640&ssl=1\")
<\/figure>\n\n\n\nRun the command <\/p>\n\n\n\n
Install-Module PnP.PowerShell -Scope CurrentUser -Force<\/code><\/pre>\n\n\n\nAnd then to check if its installed.<\/p>\n\n\n\n
Get-Module PnP.PowerShell -ListAvailable<\/code><\/pre>\n\n\n\nResult:<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-8.png?w=640&ssl=1\")
<\/figure>\n\n\n\nNow you need to connect to the Sharepoint tenant. Because all the security at Microsoft is higher than it was before. You cannot start connecting with username and password. Now you need to Register an Application with the correct rights to continue<\/p>\n\n\n\n
With the website Connect to SharePoint Online using PnP PowerShell – SharePoint Diary<\/a> I found the solution.<\/p>\n\n\n\n
The following code you need to enter in the Powershell 7 and edit the Tenantname:<\/p>\n\n\n\n
Register-PnPEntraIDAppForInteractiveLogin -ApplicationName \"PnP PowerShell\" -SharePointDelegatePermissions \"AllSites.FullControl\" -Tenant Tenantname.onmicrosoft.com<\/code><\/pre>\n\n\n\nEdge browser will automatic be opened Fill in the Admin username and password, and MFA. Then you get the message to close the browser.<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/Screenshot-2026-02-09-110236.png?resize=640%2C265&ssl=1\")
<\/figure>\n\n\n\nPowershell is still running, and after 30 seconds the browser opens again. You need to Sign in again. After that you need to accept the following window.<\/p>\n\n\n\n
![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-9.png?resize=640%2C417&ssl=1\")
<\/figure>\n\n\n\nNow the App is registered with the correct rights.
In the Powershell output, Save the ClientID for connecting to <\/p>\n\n\n\n![\"\"](\"https:\/\/i0.wp.com\/van-daag.nl\/wp-content\/uploads\/2026\/02\/image-10.png?resize=640%2C89&ssl=1\")
<\/figure>\n\n\n\nYou can check if the connection is working with<\/p>\n\n\n\n
Get-PnPWeb<\/code><\/pre>\n\n\n\nNow we can connect to the Sharepoint with Powershell with the following code (Change <TENANTNAME> And <SITENAME>, and the CLIENTID.<\/p>\n\n\n\n
$SiteURL = \"https:\/\/<TENNANTNAME>.sharepoint.com\/sites\/<SITENAME>\"\nConnect-PnPOnline -Url $SiteURL -Interactive -ClientId \"<CLIENTID>\"<\/code><\/pre>\n\n\n\nNow you can test a file if this fix the issue, You need to validate the locations because of language. Add\/Change location of the test file. (Code is generated by ChatGPT)<\/p>\n\n\n\n
$library = \"Documenten\"\n$channel = \"Algemeen\"\n$tempFolder = \"TempRehydrate\"\n$dryRun = $True\n\n$testFile = \"Gedeelde documenten\/General\/<LOCATION OF A TEST FILE>\"\n\nWrite-Host \"== Test 1 bestand ==\" -ForegroundColor Cyan\nWrite-Host \"Bestand:\" $testFile\nWrite-Host \"Dry-run:\" $dryRun\n\n# Temp folder maken (alleen echte run)\nif (-not $dryRun) {\n Add-PnPFolder -Name $tempFolder -Folder \"$library\/$channel\" -ErrorAction SilentlyContinue\n}\n# Naar temp\n$targetUrl = $testFile -replace \"$library\/$channel\", \"$library\/$channel\/$tempFolder\"\n\nWrite-Host \"\u2192 Naar temp:\" $targetUrl\nif (-not $dryRun) {\n Move-PnPFile -SourceUrl $testFile -TargetUrl $targetUrl -Force\n}\n\n# Terug\n$originalUrl = $targetUrl -replace \"$library\/$channel\/$tempFolder\", \"$library\/$channel\"\n\nWrite-Host \"\u2190 Terug:\" $originalUrlif \n(-not $dryRun) {\n Move-PnPFile -SourceUrl $targetUrl -TargetUrl $originalUrl -Force\n}\n\nWrite-Host \"== Test klaar ==\" -ForegroundColor Green<\/code><\/pre>\n\n\n\nIf the Test is working, Change $dryRun = $False
Now it moves the file.
When I did this, somehow it updated the whole Sharepoint site, and all files was accessable trough Teams.<\/p>\n\n\n\nI did some commands with <\/p>\n\n\n\n
Get-PnPListItem -List \"Documenten\"<\/code><\/pre>\n\n\n\nBecause I could not get the correct directory. You can use this to browse in the sharepoint.
Add after Documenten\/<Foldername> to go in to a folder.<\/p>\n\n\n\nWhen done, don’t forget to remove if you are done and not needed anymore.<\/p>\n\n\n\n
- \n
- Enterprise Application (Link<\/a>)<\/li>\n\n\n\n
- App registration (Link<\/a>) (check All Applications)<\/li>\n\n\n\n
- Remove the created AAD group<\/li>\n\n\n\n
- Remove the temp Enrollment restrictions (Link<\/a>) if created<\/li>\n\n\n\n
- Remove the Device (Link<\/a>)<\/li>\n<\/ul>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
We had a customer what moved all file share data to a teams channel. after migration, not all files could be open om Teams. File extention is different, not attached to one specific app. Opening the files via Sharepoint was no issue. First issue what I tough was Onedrive or Teams reset. Did it, but […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[53,6,11,56],"tags":[],"class_list":["post-762","post","type-post","status-publish","format-standard","hentry","category-blogs","category-microsoft","category-powershell-script","category-windows-11"],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/posts\/762","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/van-daag.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=762"}],"version-history":[{"count":4,"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/posts\/762\/revisions"}],"predecessor-version":[{"id":779,"href":"https:\/\/van-daag.nl\/index.php?rest_route=\/wp\/v2\/posts\/762\/revisions\/779"}],"wp:attachment":[{"href":"https:\/\/van-daag.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=762"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/van-daag.nl\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=762"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/van-daag.nl\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=762"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
- App registration (Link<\/a>) (check All Applications)<\/li>\n\n\n\n
- Enterprise Application (Link<\/a>)<\/li>\n\n\n\n