MC1191578 High Major change
(Updated) Update to EWS Access for Kiosk / Frontline Worker Licenses
Summary AI-generated
Starting October 1, 2026, EWS will be blocked for mailboxes with Exchange Online Kiosk, Microsoft 365/Office 365 F1 or F3 licenses to enhance security and enforce licensing.
Suggested actions AI-generated
- Review user license assignments
- Assign Exchange Online Plan 1, Plan 2, E3, or E5 licenses to affected users if EWS access is needed
Written by Azure OpenAI (gpt-4.1) from the text of the post below. It can be incomplete or wrong; the original post is authoritative.
Similar posts
Search for more like this- MC1227454 Exchange Web Services (EWS) retirement update
- MC1469960 (Updated) Microsoft Exchange Online: Review and configure EWSAllowedAppIDs before Exchange Web Services access changes
- MC1447678 (Updated) Microsoft Exchange Online: Prepare for Exchange Web Services retirement with EWSAllowedAppIDs
- MC1422057 Update Exchange Web Services (EWS) allow list configuration for calendar
- MC1418559 Action required: Retirement of EWS-based Personal Bookings controls (Microsoft Bookings)
- MC1446796 (Updated) Migrate Free/Busy, MailTips, and Calendar Sharing before EWS deprecation
Original post from Microsoft
Updated June 10, 2026: We have updated the timeline. Thank you for your patience.
We're making some changes to Exchange Web Services (EWS).
Starting October 1, 2026 (previously June 30), we will start to block EWS access for all mailboxes without license rights to EWS. This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS.
[How this will affect your organization:]
The impacted licenses are:
- Exchange Online Kiosk
- Microsoft 365 and Office 365 F1
- Microsoft 365 and Office 365 F3
As stated in the Service Descriptions, these licenses do not provide access to mailboxes via EWS, but these restrictions were never enforced. With this change, EWS access for users with only these license types will be blocked.
[What you need to do to prepare:]
If you wish these users to continue to use EWS, and your users are licensed with one of these noted above, you’ll need to assign a new license, one containing EWS access rights. For example, you could assign an Exchange Online Plan 1 or 2 license, or a Microsoft 365 or Office 365 E3 or E5 license.
Starting October 1, 2026 (previously June 30), requests to use EWS without a suitable license will result in a HTTP 403 response.
Learn more: Update to EWS Access for Kiosk / Frontline Worker Licensed Users
Additional details from Microsoft
- Summary
- Starting October 1, 2026, EWS access will be blocked for mailboxes with Exchange Online Kiosk, Microsoft 365/Office 365 F1, and F3 licenses. To maintain EWS access, users must be assigned licenses with EWS rights, such as Exchange Online Plan 1/2 or Microsoft 365 E3/E5.