We’re making some changes to Exchange Web Services (EWS).
Starting March 1, 2026, we will start to block EWS access for all mailboxes without license rights to EWS. This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS.
[How this will affect your organization:]
The impacted licenses are:
- Exchange Online Kiosk
- Microsoft 365 and Office 365 F1
- Microsoft 365 and Office 365 F3
As stated in the Service Descriptions, these licenses do not provide access to mailboxes via EWS, but these restrictions were never enforced. With this change, EWS access for users with only these license types will be blocked.
[What you need to do to prepare:]
If you wish these users to continue to use EWS, and your users are licensed with one of these noted above, you’ll need to assign a new license, one containing EWS access rights. For example, you could assign an Exchange Online Plan 1 or 2 license, or a Microsoft 365 or Office 365 E3 or E5 license.
Starting March 1, 2026, requests to use EWS without a suitable license will result in a HTTP 403 response.
Learn more: Update to EWS Access for Kiosk / Frontline Worker Licensed Users
Source: Microsoft
Latest Posts
- Action required: Upgrade macOS 13 devices to maintain Teams desktop access [MC1308857]
![Action required: Upgrade macOS 13 devices to maintain Teams desktop access [MC1308857] 2 pexels pixabay 163036](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Microsoft 365 Copilot (including Copilot Chat): Admin notifications for Copilot mobile app on macOS [MC1308856]
![Microsoft 365 Copilot (including Copilot Chat): Admin notifications for Copilot mobile app on macOS [MC1308856] 3 pexels pixabay 290470](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- Microsoft 365 Copilot: Admins can manage agents at scale with bulk lifecycle actions [MC1308854]
![Microsoft 365 Copilot: Admins can manage agents at scale with bulk lifecycle actions [MC1308854] 4 pexels sebastian 189349](data:image/svg+xml;base64,PHN2ZyB3aWR0aD0iMSIgaGVpZ2h0PSIxIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciPjwvc3ZnPg==)
- R2 – R2 Data Catalog now exposes metrics via the GraphQL Analytics API

![Update to EWS Access for Kiosk / Frontline Worker Licenses [MC1191578] 1 Update to EWS Access for Kiosk / Frontline Worker Licenses [MC1191578]](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-olly-840996-1024x683.webp)
![Action required: Upgrade macOS 13 devices to maintain Teams desktop access [MC1308857] 2 pexels pixabay 163036](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-pixabay-163036-150x150.webp)
![Microsoft 365 Copilot (including Copilot Chat): Admin notifications for Copilot mobile app on macOS [MC1308856] 3 pexels pixabay 290470](https://mwpro.co.uk/wp-content/uploads/2024/08/pexels-pixabay-290470-150x150.webp)
![Microsoft 365 Copilot: Admins can manage agents at scale with bulk lifecycle actions [MC1308854] 4 pexels sebastian 189349](https://mwpro.co.uk/wp-content/uploads/2025/06/pexels-sebastian-189349-150x150.webp)

