← Back
(Updated) Update to EWS Access for Kiosk / Frontline Worker Licenses
MC1191578 · build prod-20251231-200323
Category
planForChange
Severity
normal
Major change
True
Last modified
2025-12-15 19:15:20
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
2026-06-30 00:00:00
Services
Exchange Online
Tags
Updated message, User impact, Admin impact
Master tags
Security
Roadmap IDs

One-line summary

Starting June 30, 2026, EWS access will be blocked for mailboxes with Kiosk, F1, or F3 licenses; assign higher-tier licenses to maintain EWS access.

Similar updates

More like this
MC1015893 The way to control EWS usage in Exchange Online is changing
The way to control EWS usage in Exchange Online is changing Starting April 1, 2025, EWS in Exchange Online will require both tenant and user EWSEnabled flags to be true for access, improving policy enforcement consistency. We are making a change to the behavior of the EWSEnabled tenant-wide switch in Exchange Online. [When this will happen:] .
MC676299 (Updated) Retirement of Exchange Web Services in Exchange Online
(Updated) Retirement of Exchange Web Services in Exchange Online Exchange Online will block Exchange Web Services (EWS) requests starting October 1, 2026; migrate all EWS apps to Microsoft Graph as soon as possible. In 2018, we announced that we were no longer making feature updates to Exchange Web Services (EWS) in Exchange Online, and we.
MC1197103 (Updated) Exchange Online ActiveSync device support update
(Updated) Exchange Online ActiveSync device support update Starting March 1, 2026, Exchange Online will block devices using Exchange ActiveSync versions below 16.1 for improved security. Organizations must update mobile devices and apps to EAS 16.1 or higher. Outlook Mobile is. Updated December 16, 2025: We have updated the PowerShell example..
MC1182993 Preparing commercial Windows 10 devices for ESUs
Preparing commercial Windows 10 devices for ESUs Windows 10 devices need ESU licenses activated before the November 2025 security update to continue receiving updates; a new guide details activation and verification steps. Now that support for Windows 10 has officially ended, it is important that organizations with Windows 10 devices stay as.
MC1160187 Microsoft admin center: New licensing experiences
Microsoft admin center: New licensing experiences A new licensing experience in Microsoft admin center rolls out from mid-October 2025, adding unified views, error reporting, and improved tools for license management. [Introduction] Starting in October 2025, Microsoft is rolling out a refreshed licensing experience in Microsoft admin center. This.
MC1187343 (Update) New update to address issue affecting Windows 10 devices enrolled on Extended Security Updates (ESU)
(Update) New update to address issue affecting Windows 10 devices enrolled on Extended Security Updates (ESU) Windows 10 ESU devices with subscription activation may fail to install November 2025 update; install KB5072653 to resolve befor... Microsoft has identified an issue where some Windows 10, version 22H2 devices enrolled in Extended.

Details

Summary
Starting June 30, 2026, EWS access will be blocked for mailboxes licensed only with Exchange Online Kiosk, Microsoft 365/Office 365 F1, or F3. To maintain EWS access, users must be assigned licenses with EWS rights, such as Exchange Online Plan 1/2 or Microsoft 365 E3/E5.

Body (from Message Center)

Updated December 15, 2025: We have updated the timing of this change to provide additional time for customers to take action as appropriate. Thank you for your feedback.

We're making some changes to Exchange Web Services (EWS).

Starting June 30, 2026, we will start to block EWS access for all mailboxes without license rights to EWS. This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS.

[How this will affect your organization:]

The impacted licenses are:

  • Exchange Online Kiosk
  • Microsoft 365 and Office 365 F1
  • Microsoft 365 and Office 365 F3

As stated in the Service Descriptions, these licenses do not provide access to mailboxes via EWS, but these restrictions were never enforced. With this change, EWS access for users with only these license types will be blocked.

[What you need to do to prepare:]

If you wish these users to continue to use EWS, and your users are licensed with one of these noted above, you’ll need to assign a new license, one containing EWS access rights. For example, you could assign an Exchange Online Plan 1 or 2 license, or a Microsoft 365 or Office 365 E3 or E5 license.

Starting June 30, 2026, requests to use EWS without a suitable license will result in a HTTP 403 response.

Learn more: Update to EWS Access for Kiosk / Frontline Worker Licensed Users 

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": "2026-06-30T00:00:00Z",
    "ai_actions": [
      "Review mailbox licenses",
      "Assign EWS-enabled licenses to affected users"
    ],
    "ai_master_tags": [
      "Security"
    ],
    "ai_model": "gpt-4.1",
    "ai_summary": "Starting June 30, 2026, EWS access will be blocked for mailboxes with Kiosk, F1, or F3 licenses; assign higher-tier licenses to maintain EWS access.",
    "ai_topics": [
      "Exchange",
      "Microsoft 365"
    ],
    "category": "planForChange",
    "details_map": {
      "Summary": "Starting June 30, 2026, EWS access will be blocked for mailboxes licensed only with Exchange Online Kiosk, Microsoft 365/Office 365 F1, or F3. To maintain EWS access, users must be assigned licenses with EWS rights, such as Exchange Online Plan 1/2 or Microsoft 365 E3/E5."
    },
    "id": "MC1191578",
    "importance": 5,
    "is_major_change": true,
    "last_modified": "2025-12-15T19:15:20Z",
    "ms_products": [
      "Exchange"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Exchange Online"
    ],
    "severity": "normal",
    "tags": [
      "Updated message",
      "User impact",
      "Admin impact"
    ],
    "title": "(Updated) Update to EWS Access for Kiosk / Frontline Worker Licenses"
  }
}