Update 3/27/2025: We updated the "Access to public folders" section below.
This post is a part of our EWS (Exchange Web Services) to Microsoft Graph Migration Guide Series.
In 2018, we announced ...
Updated Mar 27, 2025
Version 5.0
Blog Post
luberth
Microsoft
MicrosoftA few points around the topics mentioned above:
- We are working to provide detailed communication through Message Center to specific tenants where we observe EWS activity. This is WIP, for now all tenants with Exchange online licenses will get a broader announcement with the same wording of this blog. EricToetz
- Now that basic auth was deprecated and all apps should be using OAuth to access EWS, I'd say the easiest way to identify such apps would be to check Azure AD admin center for registered app with either EWS.AccessAsUser.All or full_access_as_app permissions listed, it'd probably make sense to also check Azure AD sign-in logs to validate those apps are still active. I'm positive this should be achievable through PowerShell; I will ask someone from the team to take a look at it and get back to us. Thanks for the valuable feedback jrbarker.
- Thanks for the comprehensive list lukaaash. Some of the gaps you listed are part of our backlog and some others are probably no longer valid: as the MIME case clarified by RobertSparnaaij, access to distribution lists or support for organizational contacts.
Regarding OnPrem, EWS continue to be available for it and there is no plan to enable its access through Microsoft Graph. Similar to this, there is no plan to implement streaming notifications (you might want to take a look at the use of delta queries to track changes. Also, Event Grid and Event Hubs are now offered to deliver notifications besides webhooks).