Unanswered questions

We've done some testing to find out if Box AI Home has access to content via shared links. The result suggests that content recently access via shared link can be processed by a Box AI Home event when the user does not have collaborator access to the file.Below are the 4 tests that we performed. In all 4 instances, the user does not have collaborator access to any of the documents When the shared link is set to ‘invited people only’ AI Home cannot find the document When the document does not have a shared link enabled, AI home search does not surface it When a shared link is enabled but I have not accessed the document yet via the shared link, AI Home does not surface it when I search. When a shared link is enabled and I have accessed the document at least once via the shared link, AI Home search returns the document in search Is this behaviour expected and are there situations where content accessed recently via shared links can be included in files processed by Box AI Home?

I am unable to upload anything via the website or the box app. 

How do I turn it off.  I bring up a document to reuse for something else.  I edit it and it automatically saves over the original document before I do “save as” for another location

We’re new to Box and we have a client who wants to share files with us using the platform. On our side we want to integrate Box with our internal platform so we can pull the files in.  We created a platform app in the developer console and shared the service account email with the client.  The client then shared the folder with the service account.On our side, we can connect successfully via API using the access credentials provided during the platform app setup, but we are unable to accept the collaboration invite from the client, which is preventing the app from being able to see the contents of the folder.The documentation here says that we can just invite the service account like we would a normal user:A Service Account has its own folder tree, which starts empty. To give it access to existing content:By email: Invite the Service Account using its assigned email address, just as you would invite any other collaborator.Can anyone help point us in the right direction on this?  Should

Hi Box Community,We are using the Microsoft 365 Migration app for our Box-to-SharePoint migration.We are experiencing connection issues in Microsoft Migration Manager and want to remove the existing app authorization and reauthorize it.However, when we try to remove the authorization from Box Custom Apps Manager, we receive the following message:"If you'd like to remove authorization for this app, please call our support org."The app is currently showing as enabled.Could someone please guide us on: How can we safely remove or revoke the existing Microsoft 365 Migration app authorization? Does this require Box Support intervention, or can it be done by a Box Co-Admin? Once removed, what is the correct procedure to reauthorize the app? Any guidance would be appreciated.Thank you!

The current version of Box Drive includes compromised certificates. When can we expect a fix?https://emudhra.we-have-a-problem.com  

Hi, store regulated customer documents in Box and need a written statement from Box Security for our vendor risk file regarding today’s PHP remote code execution vulnerabilities ( CVE-2026-109618 and CVE-2026-109619 ). Specifically:Does any component in Box’s service delivery path (upload handling, API, web application) run the PHP runtime (php-src, as opposed to HHVM)?   If so, has it been patched to the versions PHP released on October 21, and when was that completed?   Has Box identified any indication of exploitation attempts against its infrastructure prior to patching?A short written response would be appreciated. If Box has published or will publish a public advisory, a link to that is sufficient for questions 1 and 2. References:https://www.cve.org/CVERecord?id=CVE-2026-109618 https://www.cve.org/CVERecord?id=CVE-2026-109619 https://nvd.nist.gov/vuln/detail/CVE-2026-109618 https://nvd.nist.gov/vuln/detail/CVE-2026-109619 https://www.php.net/archive/2026.php#2026-10-20-1 https:/

Does anyone have any security information about where Box is with mitigating PHP2Shell?  Our understanding is that Box does have PHP in use.  It would be great to know if they have this mitigated with a WAF or where they stand on rolling out patched PHP versions etc.  We’ve opened a support case and reached out to our account reps but we are not getting the level of technical detail we would like.

Aさんがエクセルファイル1を編集しています。あとからBさんもエクセルファイル1を編集しはじめました。どちらが「正」なのか検証にムダな時間が掛かります。 先に編集を始めたAさんに編集の優先権を付与し、後から開いたBさんは読み取り専用の制限を掛ける機能はありますか？

[Japanese]本日から、ブラウザ版BOXにてPDFファイルをプレビュー表示しようとすると、一瞬だけ正常表示されますが、すぐに表示がおかしくなります。WordをそのままPDFへ変換したものは問題ありません。スキャンしたPDFにてこの現象がでていますので、OCR認識機能がおかしい気がします。もしかすると、英語の部分は問題なく、日本語部分だけおかしいかもしれません。該当のPDFファイルをBOXからダウンロードすると、問題なく Acrobat Reader で表示できます。本日BOXプレビュー機能のリリースがありましたので、その影響？？日本か海外の方で、同様の方はいますか？https://support.box.com/hc/ja/articles/56653612604179 [English]Starting today, when attempting to preview certain PDF files on the Box web app, the document appears correctly for a split second before the display immediately becomes corrupted/distorted.Here are a few details about the issue:PDFs converted directly from Word documents preview with no issues.This issue specifically affects scanned PDFs, which makes me suspect it might be related to the OCR text recognition functionality.The issue seems to affect only the Japanese text portions, while English text displays without problems.Downloading the file from Box and opening it locally in Adobe Acrobat Reader displays the document perfectly fine.Is

Olá pessoal!Estou com um problema no Box e gostaria de saber se alguém já passou por isso ou sabe como resolver.Tentei abrir uma pasta e notei que estava completamente vazia. Verifiquei a Lixeira e encontrei todos os arquivos lá, mas quando tento restaurá-los, não consigo.O Box exibe a seguinte mensagem de erro:“Não foi possível executar esta ação porque a pasta designada está bloqueada por outra operação.”Alguém sabe por que isso está acontecendo e como posso restaurar meus arquivos para a pasta original? Estou preocupado em perder esses documentos e preciso muito recuperá-los.Muito obrigada por qualquer ajuda!

Account Type: Enterprise PlusWe are currently migrating from SharePoint to Box using Shuttle. At around 7TB of files migrated, we received an email referencing the Fair Use Policy.Given that Enterprise Plus offers unlimited data, could you confirm if we might encounter any issues moving forward? We have already migrated 2024 and older data files and are planning to migrate 2025 files. We want to ensure it is safe to proceed despite receiving the Fair Use Policy notice.Thank you for your guidance. Email from Box below Dear Box admin,Thank you for your continued use of Box. We have detected a significant increase in bandwidth use to your account [removed by moderator] that exceeds the bandwidth limitations set forth in our Fair Use Policy (Section 1, article a) and violates the Box Terms of Service.As a result, to prevent abuse and ensure the integrity of the Box Service for all our users, we have implemented preventative measures to limit your bandwidth. We ask that you take the necessa

Our company has many jobs running at the same time.  Some of the files are 30+ gb large so it is to our benefit to make them available offline.  The jobs themselves may take a few years to complete.  Some people are finding their disk space is getting very low due to the amount of files they have made available offline.  Is there a way to list all the files that user has made available offline so that they can free up disk space?

I need to share a video with someone but keep getting this error.  What am I doing wrong?

I sent a signature request to my email and other 2 emails from the BOX sign feature. I don't see email from the box in my email inbox. but in the Box I see the request is in process status. and I saw it in the box inbox. what could be the issue?My email is hotmail, the other 2 is yahoo email.When I first click sent request the signing order is not checkrf. after I don't see it in my email inbox I checked the signing order I made the other 2 email both as 1. my email as 2 and sent again. I got “the request already sent warning”. but I still not see anything in my email inbox. and the other 2 email also not receive the requests.Could anyone help me find out what is wrong. I use this before and it worked. but the only different is before is with 1 or 2 signers this time is with 3 signers.Thanks in advance. 

Reopen this issue, because this is still happening now and hasn’t been solved.https://support.box.com/hc/en-us/community/posts/ [removed by moderator] -BOX-Drive-installs-cbfsconnect2017-sys-which-disables-support-for-Microsoft-s-Bypass-IO-directstorage Now, there are two NetworkProvider filters, cbfs20 and cbfsconnect2017. As I detail at the bottom, setting IoBlockLegacyFsFilters to 1 does not fix the problem any longer. You can delete cbfsconnect2017 entirely as I outline, and both Box and other filesystems work at the same time, but Box persistently re-adds it to the registry, so it is only a quick fix.If there is a way to permanently remove the older legacy one, it doesn’t appear to serve a purpose.

初めてBOXを利用しています。パスワードを設定したいのですが、できません。条件を確認し、クリアしていますがそれでもできません。どうしたらいいですか。

Hello,I have a free Box Individual account. I would like to create a user-authenticated OAuth 2.0 application under a separate free Developer account, then authorize it to upload personal backups to my existing Individual account.This would be a private, non-commercial integration used only by me. It would upload encrypted backup files, download them for integrity verification, and delete older backups according to a retention policy. It would not use Box AI or Box Sign.Before creating the Developer account, I would appreciate clarification on the following:1. Is this ongoing, private use permitted without purchasing a paid plan?2. Does the free Developer account expire or lose functionality after 30 days? The Developer Sandbox Management FAQ describes it as an initial 30-day evaluation, while the Free Developer Plan documentation describes a free plan without clearly stating an expiration date.3. Can an OAuth application owned by the Developer account be authorized by my existing free

We are planning to migrate approximately 40 TB of data to Box by June 2027. However, according to the topic below, there appears to be a data transfer limit of 1 TB per month.=======================================https://community.box.com/support-forum-47/hit-monthly-bandwidth-limit-despite-unlimited-storage-enterprice-plan-what-are-the-actual-upload-caps-35274?tid=35274&fid=47=======================================https://support.box.com/hc/en-us/articles/360044194313-Understanding-Box-Bandwidth-Limits=======================================If this limit applies to a single user subscription, transferring 40 TB would take 40 months, which would not meet our schedule. For example, if we purchase 10 Box user licenses and have each user transfer data separately, would it be possible to transfer 10 TB per month, allowing us to complete the migration of 40 TB in about 4 months? Alternatively, is there another subscription plan, licensing model, or migration approach that would allow us

Hello, I followed instructions on another post about removing the user, re-adding, and checked all mail filter and firewall settings. The user is still not getting verification emails and cannot access Box. Can she be removed from the suppression list on Box’s end? The email in question is <removed personal information> Thank you 

Our BOX Admin delete users account for employees that are no longer employed at our firm.  However,   those users were listed as collaborators on various files.   We have no way to remove them as collaborators,  as the pull down box is grayed out, doesn’t allow us to “remove”.     How do we clean this up?    And yes,  I have updated browsers, and have cleared all cache and plug ins.    Thank you for your assistance.  Kathy Serksnis

While analyzing Box Drive logs, I noticed that the SHA1 value sent during upload appears to be identical to the SHA1 returned  after upload completion.Question:Does Box calculate the SHA1 hash again on the server side after the file is uploaded and stored?Or is file_version.sha1 simply derived from the hash value provided by the Box Drive client during upload?I am trying to understand whether the SHA1 returned by the API represents a server-verified hash of the stored object or merely a client-supplied value.If Box recalculates the SHA1 on the server side, at what stage of the upload workflow does the verification occur?The following log is from a file upload operation via BOX Drive. My question is whether the SHA1 value '99a2435649ffbb10e57cd0b912cd81865546d138' is recalculated and verified by the Box server after the upload, and then stored as the file's SHA1 value, or whether it is simply derived from the SHA1 value submitted by the Box Drive client.Any clarification from someone fa

I tried three times to purchase the upgrade for my space, but each time I get blocked with a message that says something like: “Your account needs further verification, please submit a ticket to customer support.” What should I do?

I TRY TO CHANGE MY PLAN AND IT SAYS: There was an error processing the request. Your account needs more verification. What do I have to do? 

box sync からboxドライブに移行しました。ローカルファイルがない同期されていた、ローカルファイルは、どこにいった？