EWS retirement
EWS retirement: what breaks Oct 1, 2026, what breaks Apr 1, 2027
The shutdown is phased and tenant-by-tenant. “Everything breaks October 1” is wrong — and so is “we have until 2027.”
- Oct 1Tenants whose
EwsEnabledwas never set get flipped off — Microsoft's own apps included. - Oct 1 · True
EWSEnabled=Truewith no allow list stops permitting unrestricted access. Microsoft pre-populates the list for customers who have not created one before September 2026, from each tenant's own usage telemetry. - → Mar 31Apps on your
EwsAllowedAppIDsallow list keep working through the phased window. - Apr 1Permanent removal. Microsoft has confirmed: no extensions, no exceptions, no re-enablement.
Which one are you? One command:
Get-OrganizationConfig -RetrieveEwsOperationAccessPolicy | Format-List EwsEnabled, EwsAllowedAppIDs | deadlinescan tenant
Parsed locally. Tells you which of the three dates is yours. What each verdict means.
A finding count of zero means no affected call sites were FOUND — not that you're unaffected.
Scan your code
Free, local, one command. Flags the sites with no Graph equivalent.
Get the scannerGet the scanner: email [email protected] and you'll get the source and a Windows binary by reply — the public repository is being prepared.
Graph never gets
public folder CRUD
in-place archive access
M365 Group mailboxes
mailbox import/export