Undelete tools scan what is left on disk, but Windows sometimes already has a better answer: File History, Previous Versions from restore points, or cloud version history for synced folders. These paths can return a clean file in minutes when carving would take hours—and they avoid the “export 400 GB of guesses” trap.
This article explains how to think about the layers, what tends to work for typical home folders, and how to avoid wasting time on the wrong tier when you are under pressure.
Layer 1: cloud versions (OneDrive, Google Drive, Dropbox)
If the missing file lived inside a synced folder, open the cloud client’s version history first. Many “I deleted my presentation” stories resolve here because the file never depended on classic undelete at all. Capture a copy to a non-synced folder so sync does not immediately overwrite your rescue.
Layer 2: File History and local backups
File History—when enabled—keeps periodic copies of libraries. It is not a full-disk image solution, but it is excellent for documents, photos, and desktop workflows that map into protected locations. If you are the household IT person, confirm whether it was ever turned on before you promise miracles.
Layer 3: Previous Versions from restore points
Restore points vary by edition, policy, and disk space. When they exist, Previous Versions can resurrect an older copy of a folder tree even if the current files are gone. This is especially relevant for “I saved over the wrong file” scenarios, not only deletes.
- Check both the folder and the parent folder—version entries are not always where you first look.
- Copy recovered files out to a neutral path; avoid “restore in place” experiments when time is tight.
- If policies disable restore points on managed PCs, do not fight IT—open a ticket.
When undelete still belongs in the story
Undelete matters when those layers were never on, when the file lived outside protected folders, or when the delete happened on removable media without shadow copies. The point is sequencing: check cheap wins first, then spend disk time on deep scans.
Document the timeline
Write down what you tried and when: “Checked OneDrive versions at 14:10; empty. Checked File History at 14:18; not enabled.” That log prevents circular retries and helps professionals if you escalate later.