Skip to content
NewA calmer, faster ZeroHour
Advisorymedium

Microsoft explains how to restore blocked Exchange Online EWS

Original title: Microsoft shares how to fix broken Exchange Online EWS apps

BleepingComputerby Sergiu Gatlan ()2 min read2 · 1 read
AI summary · x-ai/grok-4.7Summaries by Vani AI

Admins can re-enable EWS until April 2027; Microsoft says apps should move to Microsoft Graph.

Microsoft says tenant admins can turn Exchange Web Services back on in Exchange Online after default blocking broke apps that still call the API. Options are unchecking “Block your entire organization from using EWS” in Baseline Security Mode, or running Set-OrganizationConfig -EWSEnabled $true, which Microsoft says should take effect within 4 hours. Re-enabling stops working in April 2027. On-premises Exchange Server is not affected.

Key facts
  • Default blocking of EWS in Exchange Online began on October 1, 2026.
  • Final shutdown is set for April 1, 2027.
  • Affected clients include Outlook add-ins, older Outlook for Windows, and Apple Mail and Calendar on macOS.
  • Microsoft says Graph has near-complete feature parity with EWS for most scenarios.
  • Microsoft deprecated 25 least-used EWS APIs in October 2021 and removed them in March 2022.
Security assessment · AI, from the article

Impact: EWS apps fail or prompt repeatedly when the API is blocked

ProductAffected
Microsoft Exchange Online EWSblocked by default from October 1, 2026; shutdown April 1, 2027
What to do
  1. 1.Uncheck “Block your entire organization from using EWS” in Baseline Security Mode, or run Set-OrganizationConfig -EWSEnabled $true.
  2. 2.Move EWS applications to Microsoft Graph before re-enabling stops in April 2027.
Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

From the original article

2 min read at bleepingcomputer.com

Microsoft says IT admins can re-enable the retired Exchange Web Services (EWS) API in Exchange Online to fix EWS apps that have stopped working. [...]

BleepingComputer

By Sergiu Gatlan · bleepingcomputer.com

Read the full article at BleepingComputer

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.