The files in the One Drive sync folder in the local filesystem usually have the attributes "AL" or "ALOM".
| Letter | Bit Mask | Description |
|---|---|---|
| R | 0x1 | Read-only |
| H | 0x2 | Hidden |
| S | 0x4 | System |
| (V) | 0x8 | FAT volume label (obsolete in NTFS, must not be set) |
| D | 0x10 | Directory |
| A | 0x20 | Archive |
| X | 0x40 | Device (reserved, must not be set) |
| N | 0x80 | Normal (no other attributes set) |
| T | 0x100 | Temporary |
| P | 0x200 | Sparse file |
| L | 0x400 | Symbolic link / Junction / Mount point / Reparse point |
| C | 0x800 | Compressed |
| O | 0x1000 | Offline |
| I | 0x2000 | Not content indexed (shown as 'N' in Explorer on Vista) |
| E | 0x4000 | Encrypted |
| (V) | 0x8000 | Integrity (ReFS volume only) |
| - | 0x10000 | Virtual (reserved, must not be set) |
| (X) | 0x20000 | No scrub (ReFS volume only) |
| - | 0x40000 | Recall on open |
| (P) | 0x80000 | Pinned (OneDrive “always available files”) |
| (U) | 0x100000 | Unpinned (OneDrive “online-only files”) |
| - | 0x200000 | Unused and reserved |
| (M) | 0x400000 | Recall on data access |
The files with attributes "ALOM", once accessed would have the attributes "AL" as they are no longer offline and have been recalled on data access.
These files have the reparse tag 0x9000601a (IO_REPARSE_TAG_CLOUD) that is set for One Drive or other cloud files.