The way to control EWS usage in Exchange Online is changing

The behavior of the EWSEnabled switch in Exchange Online is changing. Starting April 1, 2025, EWS will only be allowed if both the organization-level and user-level EWSEnabled flags are true. This change aims to improve policy enforcement consistency. Check the blog for more details: [The way to control EWS usage in Exchange Online is changing](https://aka.ms/EWSEnabledChange). We are making a change to the behavior of the EWSEnabled tenant-wide switch in Exchange Online. When this will happen: This change will rollout worldwide, starting April 1, 2025 How this affects your organization: If you want to restrict the usage of EWS in your tenant, this change might affect you. The current behavior of the EWSEnabled flag is that it can be set at both the tenant (organization) level and the user (mailbox) level. Currently, when the flag is set to true at the user level, it takes precedence over the organization-level setting. If a setting is Null, it means the setting is not enforced at that level. If Org and user-level are both Null, the default behavior is to allow. This hierarchical structure means that if the organization-level flag is set to false, but the user-level flag is set to true, EWS requests from that user are still allowed. In summary: Organization Level User Level  EWS Requests True or <null> True or <null> Allowed True or <null> False Not Allowed False True Allowed False False or <null> Not Allowed This approach has led to situations where it can be challenging for administrators to ensure uniform policy enforcement across their organization, particularly in large and complex environments. New Behavior To address these issues, we are altering the behavior so that EWS will only be allowed if both the organization-level and user-level EWSEnabled flags are true. Here’s a simplified view of the new logic: Next Steps: Organization Level  User Level EWS Requests True or <null> True or <null> Allowed True or <null> False Not Allowed False True or <null> Not Allowed False False Not Allowed In short, EWS will be permitted only if both the organization and user-level allow it. This change ensures that administrators […]

The post The way to control EWS usage in Exchange Online is changing appeared first on M365 Admin.