Microsoft Introduces EWSAllowedAppIDs Ahead of Exchange Web Services Retirement -- Redmondmag.com

Redmond Dispatch

Microsoft Introduces EWSAllowedAppIDs Ahead of Exchange Web Services Retirement

Microsoft has announced the introduction of EWSAllowedAppIDs, a new administrative control designed to help organizations prepare for the final stages of Exchange Web Services (EWS) retirement. EWSAllowedAppIDs is a tenant-level allow list that lets Exchange Online administrators explicitly define which applications are still permitted to access EWS, based on their App ID.

The feature allows administrators to specify which applications can continue accessing EWS, providing greater visibility and control over legacy application dependencies. The capability is intended to help organizations identify critical workloads that still rely on EWS and manage the transition to modern Microsoft 365 APIs. EWSAllowedAppIDs gives administrators a practical way to identify remaining dependencies, limit EWS access to approved applications and reduce the risk of disruption as retirement enforcement begins.

Beginning in October 2026, Exchange Online starts transitioning tenants into retirement enforcement behavior, so deploying and validating the allow list earlier gives administrators time to find unknown dependencies, remove obsolete applications, engage vendors that still rely on EWS and begin migrations to Microsoft Graph.

The new control is designed to ease the migration process by allowing organizations to restrict access while maintaining support for approved applications during the transition period. Administrators are urged to begin taking an inventory of EWS usage, build an allow list and test app ID thoroughly.

Posted by Redmondmag.com Editors on 06/22/2026

Featured

Microsoft, Chevron Partner on Power Deal for Massive Texas AI Datacenter

Microsoft on Monday unveiled plans for one of the largest datacenter expansions in its history, pairing a new 2-gigawatt AI-focused campus in Pecos, Texas, with a 20-year power agreement from Chevron designed to ensure the facility has dedicated energy capacity as demand for AI services continues to surge.
Where Air Gapped Backups Actually Fail, Part 2

Air gapped backups can still fail when configuration drift, lost encryption keys and routine human mistakes go unnoticed until recovery is needed.
Nadella Says Enterprise AI's Future May Depend Less on Frontier Models Than Learning Systems

Satya Nadella is making the case that the next phase of enterprise AI will not be won by the company with the highest-scoring model on a public leaderboard.
AI Agents Could Put Enterprise GenAI Budgets Under Pressure

Enterprises moving generative AI from pilots into production may be underestimating the cost of running those systems at scale, particularly as inference workloads and AI agents become more common, according to a new Gartner report.
Banks Targeted by Fileless Phantom Stealer Phishing Campaign

A new phishing campaign is targeting banks and other high-value organizations with Phantom Stealer, a commercially available infostealer that runs in memory to avoid traditional detection, according to new research from Fortra.