Key Takeaways:<\/p>\n
Only allow\u2011listed apps will retain EWS access after enforcement begins.<\/p>\n
Organizations must identify and manage apps still using EWS.<\/p>\n
This transition aims to accelerate migration to Microsoft Graph.<\/p>\n
As Exchange Web Services approaches its official phase\u2011out, Microsoft is rolling out new controls to help organizations manage this process. To ease the transition, the company has introduced a new control feature that lets organizations manage which apps can still access EWS before the shutdown begins.<\/p>\n
Exchange Web Services (EWS)<\/a> is an API that allows applications to interact with data in Exchange Online or on-premises Exchange servers. It enables developers and systems to access and manage emails, calendars, contacts, mailboxes, and other messaging features programmatically, which makes it useful for integrations like email clients, scheduling tools, and enterprise apps.<\/p>\n Why is Exchange Web Services being phased out?<\/p>\n Microsoft first announced the retirement of Exchange Web Services (EWS) in July 2018 and said that the API would no longer receive new feature updates. In 2023, the company confirmed that EWS would be fully disabled<\/a> in Exchange Online starting in October 2026. The main reason for retiring EWS is that this legacy technology no longer meets modern requirements for security, scalability, and reliability and has largely been replaced by the more advanced and unified Microsoft Graph API.<\/p>\n \u201cThe retirement model uses the existing EWSEnabled organization-level setting together with the new EWSAllowedAppIDs allow list. Before October 2026, the behavior is intentionally permissive to give customers time to inventory dependencies, deploy an allow list, and validate which applications still require EWS. This pre-October phase gives administrators room to deploy and test an allow list without immediately breaking existing applications,\u201d the Exchange team explained<\/a>.<\/p>\n What changes when enforcement begins in October 2026?<\/p>\n Starting in October, Exchange Online will enforce stricter controls as part of the EWS retirement process. Going forward, enabling EWS without an allow list will no longer provide access. Instead, if no allow list is configured, all EWS access will be blocked, and only applications explicitly added to the allow list will continue to function.<\/p>\n This retirement strategy is designed to require explicit acknowledgement of EWS usage and restrict usage to known and approved apps. It also helps to accelerate migration to Microsoft Graph and modern APIs.<\/p>\n According to Microsoft, many tenants currently allow unrestricted EWS access, and this update will automatically disable EWS for such tenants. The company has warned that administrators who haven\u2019t prepared for this change may face service disruptions.<\/p>\n Steps IT administrators should take now<\/p>\n Microsoft urges IT admins to begin preparing for EWS retirement before enforcement begins within their enterprise environments. Administrators must leverage usage reports or monitoring tools to identify all apps and services that still rely on EWS. They should also create a controlled allow list that includes only the applications that still require EWS access.<\/p>\n It\u2019s also recommended to conduct thorough testing to ensure that approved applications continue to work under the new restrictions. Moreover, IT admins must continuously review and update the allow list as they discover new dependencies or retire old ones. They should also actively work with software vendors and internal teams to migrate from EWS to modern alternatives such as Microsoft Graph.<\/p>\n","protected":false},"excerpt":{"rendered":"Key Takeaways: Only allow\u2011listed apps will retain EWS access after enforcement begins. Organizations must identify and manage apps…\n","protected":false},"author":2,"featured_media":116972,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[85,46,125],"class_list":["post-505513","post","type-post","status-publish","format-standard","has-post-thumbnail","category-technology","tag-il","tag-israel","tag-technology"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/505513","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=505513"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/505513\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/116972"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=505513"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=505513"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=505513"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}