"Microsoft is getting serious about the end of Exchange Web Services (EWS) and has announced that, starting in March 2026, it will begin blocking EWS access to mailboxes without license rights. EWS is an API that allows applications to access mailboxes and data stores in Exchange Online and Exchange Server. From March, users with only Microsoft 365 or Office 365 F1 or F3 licenses for frontline workers, or with Exchange Online Kiosk licenses, will be blocked from using EWS."
"The workaround? Change to an Exchange Online Plan 1 or 2 license, or a Microsoft 365 or Office 365 E3 or E5 license. Microsoft said that the licenses had never actually permitted access to mailboxes via EWS, but the company had never enforced the restrictions. "This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS," Redmond said in a statement."
"The API played a role in the Midnight Blizzard incident, where miscreants stole emails and other data. One result of the event was that Microsoft " elevated the urgency of the EWS deprecation effort." From March 1, 2026, requests to use EWS without a suitable license will result in an HTTP 403 response. Customers will therefore need to check that they do indeed have a suitable license or face integrations suddenly stopping."
Microsoft will block Exchange Web Services (EWS) access to mailboxes for users on Microsoft 365 or Office 365 F1/F3 frontline-worker licenses and Exchange Online Kiosk licenses starting March 1, 2026. Customers with those licenses must switch to Exchange Online Plan 1 or 2, or Microsoft 365/Office 365 E3 or E5, to retain EWS access. Requests to use EWS without suitable license rights will receive an HTTP 403 response and can break integrations. EWS will remain supported in Exchange Server, but it will be disabled globally across Exchange Online by October 2026. Microsoft cites security concerns, including the Midnight Blizzard incident, and prefers the Graph API as the alternative.
Read at Theregister
Unable to calculate read time
Collection
[
|
...
]