The way to control EWS usage in Exchange Online is changing
The behavior of the EWSEnabled switch in Exchange Online is changing. Starting April 1, 2025, EWS will only be allowed if both the organization-level and user-level EWSEnabled flags are true. This change aims to improve policy enforcement consistency. Check the blog for more details: [The way to control EWS usage in Exchange Online is changing](https://aka.ms/EWSEnabledChange). We are making a change to the behavior of the EWSEnabled tenant-wide switch in Exchange Online. When this will happen: This change will rollout worldwide, starting April 1, 2025 How this affects your organization: If you want to restrict the usage of EWS in your tenant, this change might affect you. The current behavior of the EWSEnabled flag is that it can be set at both the tenant (organization) level and the user (mailbox) level. Currently, when the flag is set to true at the user level, it takes precedence over the organization-level setting. If a setting is Null, it means the setting is not enforced at that level. If Org and user-level are both Null, the default behavior is to allow. This hierarchical structure means that if the organization-level flag is set to false, but the user-level flag is set to true, EWS requests from that user are still allowed. In summary: Organization Level User Level EWS Requests True or <null> True or <null> Allowed True or <null> False Not Allowed False True Allowed False False or <null> Not Allowed This approach has led to situations where it can be challenging for administrators to ensure uniform policy enforcement across their organization, particularly in large and complex environments. New Behavior To address these issues, we are altering the behavior so that EWS will only be allowed if both the organization-level and user-level EWSEnabled flags are true. Here’s a simplified view of the new logic: Next Steps: Organization Level User Level EWS Requests True or <null> True or <null> Allowed True or <null> False Not Allowed False True or <null> Not Allowed False False Not Allowed In short, EWS will be permitted only if both the organization and user-level allow it. This change ensures that administrators […]
The post The way to control EWS usage in Exchange Online is changing appeared first on M365 Admin.
Published on:
Learn moreWe can help you with The way to control EWS usage in Exchange Online is changing
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
Intune: Windows Health Attestation Migration to Microsoft Azure Attestation
Microsoft Intune will migrate Windows Health Attestation compliance evaluation from the current Device Health Attestation (DHA) service to Mic...
Dynamics 365 Commerce – Print receipts using Adyen payment terminal printers
We are announcing the ability to print receipts using the built-in printer on supported Adyen payment terminals in Dynamics 365 Commerce. This...
Outlook: Multi Account Search
Users will be able to see results from multiple mailboxes interweaved in a single ranked list and will be able to do standard mail actions. Pr...
Dynamics 365 Field Service: Manage rental service demand with work order requests
Rental organizations need to coordinate commercial rental activity, equipment availability, asset condition, and service execution across mult...
Microsoft Teams: Schedule Channel Meetings from Outlook Calendar
Users will be able to schedule Microsoft Teams channel meetings directly from Outlook Calendar. This streamlines meeting creation and helps ke...
Microsoft 365 admin center: Optional Public CDN Support in Brand Center Setup
We are updating the Brand Center setup experience so that administrators can set up Brand Center without enabling Public CDN. Today, Public CD...
Dynamics 365 Field Service: Book Work Orders with Multiple Requirements
Dispatchers can now select which resource requirement to schedule when booking a work order that has multiple requirements. The new Book exper...
Brand Skill support now available in PPT Copilot [Web]
Brand managers can upload custom presentation skills as Markdown files to Brand Kit for use with Copilot in PowerPoint Web, enabling consisten...
Brand Skill support now available in PPT Copilot [Desktop]
Brand managers can now upload custom presentation skills as Markdown files to Brand Kit for use with Copilot in PowerPoint Desktop, enabling c...