Exchange Web Services (EWS) retirement in Exchange Online is entering its final phase. Over the last several years, Microsoft has worked with product teams, independent software vendors (ISVs), and c...
Updated Sep 22, 2026
Version 18.0
Blog Post
9 MIN READ
Introducing EWSAllowedAppIDs: Preparing for the Final Phase of EWS Retirement
Hi, I would like to know how to run Set-OrganizationConfig -EwsAllowedAppIDs "using-my-app-id-values".
I've tried this with my account and consistently get the following error:
Set-OrganizationConfig: A parameter cannot be found that matches parameter name 'EwsAllowedAppIDs'.
I've also already tried running Enable-OrganizationCustomization beforehand, but EwsAllowedAppIDs still fails to run.
Can anyone share some insight on this?
- Greg Taylor - EXCHANGE
Microsoft
It's still rolling out as the blog says. Once it hits your tenant it'll work as described above.
Looking at the syntax there is no EwsAllowedAppIDs. Is there a particular module or PS version required to get the switch needed to configure?
PS C:\windows\system32> get-help Set-OrganizationConfigNAME
Set-OrganizationConfig
SYNTAX
Set-OrganizationConfig [-BlockMoveMessagesForGroupFolders <bool>] [-DefaultGroupAccessType <Object>]
[-DefaultPublicFolderAgeLimit <Object>] [-DefaultPublicFolderDeletedItemRetention <Object>]
[-DefaultPublicFolderIssueWarningQuota <Object>] [-DefaultPublicFolderMaxItemSize <Object>]
[-DefaultPublicFolderMovedItemRetention <Object>] [-DefaultPublicFolderProhibitPostQuota <Object>]
[-ExchangeAttributesCloudManagedByDefault] [-ExchangeAttributesServerManagedByDefault]
[-IsGroupFoldersAndRulesEnabled <bool>] [-IsGroupMemberAllowedToEditContent <bool>] [-PublicFoldersEnabled
<Object>] [-PublicFolderShowClientControl <bool>] [-RemotePublicFolderMailboxes <Object>] [-WhatIf] [-Confirm]
[<CommonParameters>]
Set-OrganizationConfig [-BlockMoveMessagesForGroupFolders <bool>] [-DefaultGroupAccessType <Object>]
[-DefaultPublicFolderAgeLimit <Object>] [-DefaultPublicFolderDeletedItemRetention <Object>]
[-DefaultPublicFolderIssueWarningQuota <Object>] [-DefaultPublicFolderMaxItemSize <Object>]
[-DefaultPublicFolderMovedItemRetention <Object>] [-DefaultPublicFolderProhibitPostQuota <Object>]
[-DelayedDelicensingEnabled <bool>] [-EndUserMailNotificationForDelayedDelicensingEnabled <bool>]
[-ExchangeAttributesCloudManagedByDefault] [-ExchangeAttributesServerManagedByDefault]
[-IsGroupFoldersAndRulesEnabled <bool>] [-IsGroupMemberAllowedToEditContent <bool>] [-PublicFoldersEnabled
<Object>] [-PublicFolderShowClientControl <bool>] [-RemotePublicFolderMailboxes <Object>]
[-TenantAdminNotificationForDelayedDelicensingEnabled <bool>] [-WhatIf] [-Confirm] [<CommonParameters>]
ALIASES
None
REMARKS
None
- Greg Taylor - EXCHANGE
Ignore Get-Help - clearly we need to fix that. The parameter does exist as documented, and thousands of tenants are setting up their own AppID allow list every single day right now. The syntax and usage are in the article here and in others.
