Blog Post

Exchange Team Blog
1 MIN READ

Update to EWS Access for Kiosk / Frontline Worker Licensed Users

The_Exchange_Team's avatar
The_Exchange_Team
Platinum Contributor
Dec 02, 2025

Update 12/15/2025: We modified the date of this change to end of June 2026 based on customer feedback. Please use that extra time to remove your dependencies on EWS.

As part of our ongoing efforts to deprecate Exchange Web Services (EWS), starting at the end of June 2026, we will start to block EWS access for all mailboxes without license rights to EWS. This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS.

The impacted licenses are:

  • Exchange Online Kiosk
  • Microsoft 365 and Office 365 F1
  • Microsoft 365 and Office 365 F3

As stated in the Service Descriptions, these licenses do not provide access to mailboxes via EWS, but these restrictions were never enforced. With this change, EWS access for users with only these license types will be blocked.

If you wish them to use EWS, and your users are licensed with one of these noted above, you’ll need to assign a new license, one containing EWS access rights. For example, you could assign an Exchange Online Plan 1 or 2 license, or a Microsoft 365 or Office 365 E3 or E5 license.

Starting July 1, 2026, requests to use EWS without a suitable license will result in a HTTP 403 response.

The Exchange Team

Updated Dec 18, 2025
Version 4.0

21 Comments