Hello,
So I've finally had some time to look into this today, I appreciate your patience.
Here are my answers to your earlier questions in bold font.
1. The file name created by OneDrive you mentioned, “file 2.pdf”, “file 3.pdf”, “file 4.pdf”, I have tested on PC and Mac, when a file is repeatedly created in a local File Explorer/Finder, the numeric number of the file name should be bracketed,
like this “file (2).pdf”. Is this the same situation? Or is the file name really like this (without brackets)?
Yes, that is correct. It will add the number to the end of the file name without brackets, it is this way on the Mac and PC.
2. You said that some files that had the year in them "receipt 2019.pdf" had been changed to 2020, do you mean the file name is changed? Generally, the file name will not be changed automatically without any workflow or flow. Are there any Workflow
associations for these files, such as Microsoft Flow, will it be caused by an automated process?
Yes, the filename itself is being changed, I have seen this anomaly change a filename ending in "2017" multiple times to 2018, 2019, 2020. This makes finding the duplicates more difficult to find. I've also noticed other instances where it will change other numbers (not just dates) and it will just create a duplicate file with the next number in succession (for instance, a file ending with 215965 has a duplicate of the same file but now it's 215966.)
3. Have you shared your OneDrive account and password with others? Or whether these files are shared with others with editing permission? It may be caused by the operation of other people who has permissions.
No, no one besides me access to this account as far as I know.
4. Check the information of the new files (properties/ get info), find out the creator and information about when it was created, recalling what you are doing at that time may cause this issue.
It appears many of these files were created on Wednesday, October 23rd 2019, some others have dates of Tuesday, October 29th. I can't recall anything occurring on these dates of note.
5. If you are an administrator of your organization and have enabled the Audit log, you can go to Audit log to check the Modified file, Copied
file, Uploaded file and Rename file activities, including who and when and how these files were created. If you have no access, you can contact your administrator to check it.
I see a message that I am not an administrator for the Audit Log.
Thanks in advance for your time, much appreciated.