<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>rss.livelink.threads-in-node</title>
    <link>https://techcommunity.microsoft.com/t5/exchange/ct-p/Exchange</link>
    <description>rss.livelink.threads-in-node</description>
    <pubDate>Fri, 24 Apr 2026 22:40:35 GMT</pubDate>
    <dc:creator>Exchange</dc:creator>
    <dc:date>2026-04-24T22:40:35Z</dc:date>
    <item>
      <title>Will these commands fix our phantom meetings issue?</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/will-these-commands-fix-our-phantom-meetings-issue/m-p/4514563#M17212</link>
      <description>&lt;P&gt;I opened a ticket with Microsoft Support for an issue we are facing where "phantom" meetings are appearing in at least two of our meeting room calendars. The subject of the meeting says "Private appointment" and the lock icon appears at the bottom, and when you click on any of them they disappear from the calendar, only to re-appear when you navigate away and come back. They appear in Classic Outlook, New Outlook and Outlook for the web.&lt;/P&gt;&lt;P&gt;The support rep is telling me to run these commands on the room mailbox to "reset the room mailbox availability cache":&lt;/P&gt;&lt;LI-CODE lang=""&gt;Set-CalendarProcessing -Identity &amp;lt;roommailboxupn&amp;gt; -RemoveOldMeetingMessages $true
Set-CalendarProcessing -Identity &amp;lt;roommailboxupn&amp;gt; -AutomateProcessing AutoAccept&lt;/LI-CODE&gt;&lt;P&gt;But if I run Get-CalendarProcessing, it confirms that these are the existing settings already:&lt;/P&gt;&lt;LI-CODE lang=""&gt;Get-CalendarProcessing -Identity &amp;lt;roommailboxupn&amp;gt; | fl RemoveOldMeetingMessages,AutomateProcessing

RemoveOldMeetingMessages : True
AutomateProcessing : AutoAccept&lt;/LI-CODE&gt;&lt;P&gt;This can't possibly do anything, right? I should ask my CSAM to open a GetHelp on this case, right?&lt;/P&gt;&lt;P&gt;Does anyone know how to actually fix this issue?&lt;/P&gt;</description>
      <pubDate>Fri, 24 Apr 2026 16:04:49 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/will-these-commands-fix-our-phantom-meetings-issue/m-p/4514563#M17212</guid>
      <dc:creator>RyanSteele-CoV</dc:creator>
      <dc:date>2026-04-24T16:04:49Z</dc:date>
    </item>
    <item>
      <title>Disabling Calendar Repair Assistant on mailboxes in Exchange Onprem 2019</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/disabling-calendar-repair-assistant-on-mailboxes-in-exchange/m-p/4514344#M17211</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;We are in Exchange Hybrid setup were some mailboxes are in cloud and onprem. Recently, there were some issues with Calendar events were recipients weren't notified of any updates for the events, sometimes the updated event would have been cancelled by recipient and the recipient didn't even know that they received update and it was automatically cancelled by them....&lt;/P&gt;&lt;P&gt;This was a normal situation for EAs for their executive calendar events&lt;BR /&gt;&lt;BR /&gt;When raised a ticket with Microsoft on this issue, Microsoft collected CDL logs and found that CRA was kicking in each time when there was an update and was reverting the updated meeting request to the previous cancellation and as we know this is not a bug, this is just how the CRA works...So, Microsoft is like CRA is a legacy feature with limited applicability and functionality in the current exchange environment and hence has asked to disable-CRA in On-prem exchange as this will not affect normal calendar usage for users.&amp;nbsp;&lt;BR /&gt;&lt;BR /&gt;I had disabled for 5 users and they have reverted that they are not seeing any issues post disabling CRA. so before gunning down on all mailboxes I wanted to take a second opinion on whether is it safe to disable CRA for alll mailboxes in Exchange Onprem&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Fri, 24 Apr 2026 04:33:10 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/disabling-calendar-repair-assistant-on-mailboxes-in-exchange/m-p/4514344#M17211</guid>
      <dc:creator>PoorMens_Bravo</dc:creator>
      <dc:date>2026-04-24T04:33:10Z</dc:date>
    </item>
    <item>
      <title>Modernizing DNS Security for Exchange Online Mail Flow</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/modernizing-dns-security-for-exchange-online-mail-flow/ba-p/4514248</link>
      <description>&lt;P&gt;The Domain Name System (DNS) protocol is used by clients to find mail servers over the internet. DNS is unencrypted and unauthenticated by default, making it vulnerable to spoofing, tampering, and adversary‑in‑the‑middle attacks. As threat actors increasingly target the foundational layers of email delivery, modern DNS security protocols have become essential to protecting organizations.&lt;/P&gt;
&lt;P&gt;To address these gaps, Exchange Online has invested heavily in &lt;STRONG&gt;modern, standards‑based DNS security &lt;/STRONG&gt;– including &lt;STRONG&gt;DNSSEC&lt;/STRONG&gt;, &lt;STRONG&gt;SMTP DANE&lt;/STRONG&gt;, and &lt;STRONG&gt;MTA‑STS&lt;/STRONG&gt; – to ensure mail is delivered over validated, encrypted, and tamper‑resistant channels by default wherever possible.&lt;/P&gt;
&lt;P&gt;In this post, we will provide updates on these efforts and discuss upcoming plans to keep raising the email security bar.&lt;/P&gt;
&lt;H4&gt;DNSSEC Enablement Wizard for Exchange Online&lt;/H4&gt;
&lt;P&gt;To simplify adoption of SMTP DANE with DNSSEC, in Q3 of calendar year 2026 we’re releasing a &lt;STRONG&gt;DNSSEC Enablement Wizard&lt;/STRONG&gt; in the Exchange Admin Center. This guided workflow:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Validates DNS prerequisites&lt;/LI&gt;
&lt;LI&gt;Provisions the customer-specific DNSSEC‑capable mail flow endpoint&lt;/LI&gt;
&lt;LI&gt;Reduces configuration risk during MX transition&lt;/LI&gt;
&lt;LI&gt;Prepares the domain for SMTP DANE adoption&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;For customers who wish to fully enforce SMTP DANE with DNSSEC, PowerShell will remain the option for enabling SMTP DANE once DNSSEC-enablement is complete as per &lt;A href="https://learn.microsoft.com/purview/how-smtp-dane-works#set-up-inbound-smtp-dane-with-dnssec" target="_blank"&gt;Set up inbound SMTP DANE with DNSSEC&lt;/A&gt;.&lt;/P&gt;
&lt;H4&gt;Control Outbound SMTP DANE &amp;amp; MTA‑STS Validation on Connectors&lt;/H4&gt;
&lt;P&gt;With &lt;A href="https://techcommunity.microsoft.com/blog/exchange/announcing-smtp-dane--mta-sts-connector-modes-in-exchange-online/4501005" target="_blank"&gt;rollout started in late Feb 2026&lt;/A&gt;, we introduced a new capability that gives admins &lt;STRONG&gt;explicit control&lt;/STRONG&gt; over SMTP DANE and MTA‑STS validation behavior for messages sent over &lt;STRONG&gt;outbound connectors&lt;/STRONG&gt;.&lt;/P&gt;
&lt;P&gt;The MtaStsMode and SmtpDaneMode parameters on New/Set/Get-OutboundConnector lets organizations choose how strictly Exchange Online enforces these security protocols on a per‑connector basis:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;STRONG&gt;Opportunistic (default): &lt;/STRONG&gt;Exchange Online attempts SMTP DANE and/or MTA‑STS validation but still delivers mail if the destination doesn’t support them.&lt;/LI&gt;
&lt;LI&gt;&lt;STRONG&gt;None&lt;/STRONG&gt;: which applies to both MTA-STS and SMTP DANE and disables the validation entirely, therefore&amp;nbsp;reducing the security of emails sent over that connector&amp;nbsp;by removing MTA-STS and/or SMTP DANE protections designed to prevent downgrade attacks and spoofed MX redirection.&lt;/LI&gt;
&lt;LI&gt;&lt;STRONG&gt;Mandatory (SMTP DANE only): &lt;/STRONG&gt;Enforces full SMTP DANE with DNSSEC validation and queues (then rejects) mail if validation fails or destination domain doesn’t support SMTP DANE with DNSSEC by end of queuing period.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;This outbound connector capability makes it easier for customers to adopt stronger DNS‑based protections incrementally while maintaining compatibility with partner ecosystems.&lt;/P&gt;
&lt;H5&gt;What happened to auto-provisioning of DNSSEC-enabled mail flow records (A/AAA)?&lt;/H5&gt;
&lt;P&gt;Due to internal infrastructure projects, we had to delay this DNS provisioning change until second half of calendar year 2026. Gradually switching provisioning of all A records for new Accepted Domains into the new subdomains under mx.microsoft is still a priority for us, but making infrastructure changes is complex. Significant challenges have required us to re-order the work necessary to complete this change while maintaining service health and reliability.&lt;/P&gt;
&lt;P&gt;Original announcement: &lt;A href="https://techcommunity.microsoft.com/blog/exchange/implementing-inbound-smtp-dane-with-dnssec-for-exchange-online-mail-flow/3939694" target="_blank"&gt;Implementing Inbound SMTP DANE with DNSSEC for Exchange Online Mail Flow | Microsoft Community Hub&lt;/A&gt;.&lt;/P&gt;
&lt;H4&gt;Are there any planned updates to mail.protection.outlook.com?&lt;/H4&gt;
&lt;P&gt;Currently, there are no plans to enable DNSSEC on the mail flow domain &lt;STRONG&gt;mail.protection.outlook.com&lt;/STRONG&gt;. Customers who require DNSSEC for inbound mail will continue to need to transition the DNSSEC-capable dedicated subdomains within mx.microsoft. As MX changes can be operationally sensitive, we built the DNSSEC Enablement Wizard to ease the friction of this change.&lt;/P&gt;
&lt;P&gt;In early third quarter of 2026, mail.protection.outlook.com will receive TCP and EDNS support. This modernization improves reliability and enables future security enhancements at cloud scale. &amp;nbsp;&lt;/P&gt;
&lt;H4&gt;Raising the Security Bar – Together&lt;/H4&gt;
&lt;P&gt;Across these investments, our goal is simple: &lt;STRONG&gt;make strong email security the default&lt;/STRONG&gt;, without introducing additional operational complexity or overhead. DNSSEC, SMTP DANE, and MTA‑STS directly address long‑standing weaknesses in the global email ecosystem, and Exchange Online is committed to leading the industry in deploying these foundational protections at scale.&lt;/P&gt;
&lt;P&gt;By modernizing our DNS infrastructure, providing safer tooling for domain transitions, and giving customers finer control over protocol enforcement, we’re continuing to raise the security bar for all Exchange Online customers—and making it easier than ever to adopt modern DNS security.&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;Microsoft 365 Messaging Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Thu, 23 Apr 2026 21:00:39 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/modernizing-dns-security-for-exchange-online-mail-flow/ba-p/4514248</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-04-23T21:00:39Z</dc:date>
    </item>
    <item>
      <title>High Volume Email is Generally Available and Ready to Charge</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/high-volume-email-is-generally-available-and-ready-to-charge/m-p/4513911#M17210</link>
      <description>&lt;P&gt;On April 1, Microsoft announced the general availability for the High-Volume Email (HVE) solution together with details of the PAYG charges incurred to send email to internal recipients, which is all that HVE can do. Microsoft will enable HVE charging on June 1, 2026, Before then, you’ll need to create a billing policy and link it to a valid Azure subscription if you want to continue to use HVE.&lt;/P&gt;
&lt;P&gt;https://office365itpros.com/2026/04/23/hve-ga-charging/&lt;/P&gt;</description>
      <pubDate>Thu, 23 Apr 2026 08:31:39 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/high-volume-email-is-generally-available-and-ready-to-charge/m-p/4513911#M17210</guid>
      <dc:creator>TonyRedmond</dc:creator>
      <dc:date>2026-04-23T08:31:39Z</dc:date>
    </item>
    <item>
      <title>Is the Archive mailbox self-help diagnostic working for anyone?</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/is-the-archive-mailbox-self-help-diagnostic-working-for-anyone/m-p/4513500#M17204</link>
      <description>&lt;P&gt;Just curious: is the archive mailbox self-help diagnostic at &lt;A class="lia-external-url" href="https://aka.ms/PillarArchiveMailbox" target="_blank"&gt;https://aka.ms/PillarArchiveMailbox&lt;/A&gt; working for anyone?&amp;nbsp;&lt;/P&gt;&lt;P&gt;When I run it, instead of getting results about the user whose UPN I entered, I get this:&lt;/P&gt;&lt;BLOCKQUOTE&gt;&lt;P&gt;The following issues were found with your archive mailbox.&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;No account was found for &lt;STRONG&gt;[The UPN of &lt;EM&gt;my&lt;/EM&gt; admin account]&lt;/STRONG&gt;. Make sure you've entered the correct email address or create a new account with that name. For more information, see &lt;A href="http://aka.ms/addO365User" target="_blank"&gt;Add users to Office 365&lt;/A&gt;.&lt;/LI&gt;&lt;/UL&gt;&lt;/BLOCKQUOTE&gt;&lt;P&gt;I tried opening a ticket with Microsoft Support, but they refused to work on it without requiring me to do all the legwork of gathering logs and HAR traces and who knows what else, &lt;EM&gt;despite&lt;/EM&gt; the fact that the support agent was able to replicate the exact same issue in his lab.&lt;/P&gt;</description>
      <pubDate>Tue, 21 Apr 2026 21:07:40 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/is-the-archive-mailbox-self-help-diagnostic-working-for-anyone/m-p/4513500#M17204</guid>
      <dc:creator>RyanSteele-CoV</dc:creator>
      <dc:date>2026-04-21T21:07:40Z</dc:date>
    </item>
    <item>
      <title>Change Optics Report released into Public Preview to showcase messages impacted by future changes</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/change-optics-report-released-into-public-preview-to-showcase/ba-p/4513047</link>
      <description>&lt;P&gt;Change Management is an important part of managing the improvements we make to our service that may sometimes disrupt our customers. The key is empowering customers to identify if they have messages that will be affected when we announce changes to the service. To that end, we’d like to announce the Public Preview for the Change Optics Report. It will be the central location for finding messages that could be affected by future changes to the service.&lt;/P&gt;
&lt;P&gt;As we improve or identify issues in Exchange Online, there is now a report to point customers to when we announce changes that could affect the sending and delivery of certain messages. This report will showcase multiple scenarios of interest and importance to admins preparing for change. It displays a &lt;STRONG&gt;sample&lt;/STRONG&gt; set of messages that have the characteristics that match those expected to be affected.&lt;/P&gt;
&lt;P&gt;These example messages give admins the information necessary to launch investigations that highlight where actions are needed to avoid disruption to their organizations as changes arrive. The report can then be used to observe the progress made to reduce those messages to a point where the risk has been removed ahead of the related change.&lt;/P&gt;
&lt;H4&gt;Initial Scenarios&lt;/H4&gt;
&lt;P&gt;The report is being released with two scenarios already included.&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;STRONG&gt;OMC&lt;/STRONG&gt; represents Onmicrosoft.com traffic being sent externally. This is aimed at customers from large organizations still seeing usage they need to address before the traffic is throttled. &amp;nbsp;For more information, see &lt;A href="https://techcommunity.microsoft.com/blog/exchange/limiting-onmicrosoft-domain-usage-for-sending-emails/4446167" target="_blank"&gt;Limiting Onmicrosoft Domain Usage for Sending Emails | Microsoft Community Hub.&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;STRONG style="color: rgb(30, 30, 30);"&gt;DRS&lt;/STRONG&gt;&lt;SPAN style="color: rgb(30, 30, 30);"&gt; represents Direct Send traffic being received by an organization’s tenant. This is useful for customers looking to use the Reject Direct Send setting and needing to first ensure all legitimate traffic is identified and catered for. For more information, see &lt;/SPAN&gt;&lt;A style="font-style: normal; font-weight: 400; background-color: rgb(255, 255, 255);" href="https://techcommunity.microsoft.com/blog/exchange/introducing-more-control-over-direct-send-in-exchange-online/4408790" target="_blank"&gt;Introducing more control over Direct Send in Exchange Online | Microsoft Community Hub.&lt;/A&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;H4&gt;Using the report&lt;/H4&gt;
&lt;P&gt;The report can be found in the Exchange Admin Center (&lt;A href="https://admin.cloud.microsoft/exchange" target="_blank"&gt;https://admin.cloud.microsoft/exchange&lt;/A&gt;) under &lt;STRONG&gt;Reports &lt;/STRONG&gt;&lt;STRONG&gt;&amp;gt; Mail flow &amp;gt;&lt;/STRONG&gt;&lt;STRONG&gt;&amp;nbsp;Change Optics Report&lt;/STRONG&gt;&lt;/P&gt;
&lt;P class="lia-indent-padding-left-30px"&gt;Change Optics Report: Use this report to view changes made to your Exchange Online configuration over time. You can filter by date range and change type to find specific changes.&lt;/P&gt;
&lt;P&gt;The report is divided into a Summary page and Details page.&lt;/P&gt;
&lt;H5&gt;Summary Page&lt;/H5&gt;
&lt;P&gt;This provides a summary chart tracking the volume of messages flag by the various scenarios being tracked. &amp;nbsp;&lt;/P&gt;
&lt;img /&gt;
&lt;H5&gt;Details Page&lt;/H5&gt;
&lt;P&gt;The Details page allows you to see example messages per scenario. The main message properties are available for use in an investigation, and the table can be exported. Message Trace can be used to retrieve any additional information needed about a message.&lt;/P&gt;
&lt;P&gt;The scenario you are interested in can be selected from the dropdown menu.&lt;/P&gt;
&lt;img /&gt;
&lt;P&gt;Please provide any feedback in the Comments section. We will update this blog to announce when the report reaches GA.&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;Microsoft 365 Messaging Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 20 Apr 2026 16:03:10 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/change-optics-report-released-into-public-preview-to-showcase/ba-p/4513047</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-04-20T16:03:10Z</dc:date>
    </item>
    <item>
      <title>User cannot rename categories even when being the owner</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/user-cannot-rename-categories-even-when-being-the-owner/m-p/4512931#M17203</link>
      <description>&lt;P&gt;Hi guys,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I have a user that cannot rename categories in a mailbox whilst being the owner.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;As you can&amp;nbsp;her permission level is set on owner.&lt;/P&gt;&lt;img /&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;And yet the rename is greyed out:&lt;/P&gt;&lt;img /&gt;&lt;P&gt;User says she was able to rename just some time ago, but when she tried on 17/04/2026 she couldn't. Anyone has any ideas?&lt;/P&gt;</description>
      <pubDate>Mon, 20 Apr 2026 10:03:16 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/user-cannot-rename-categories-even-when-being-the-owner/m-p/4512931#M17203</guid>
      <dc:creator>mateusz_pawlik_skf_123</dc:creator>
      <dc:date>2026-04-20T10:03:16Z</dc:date>
    </item>
    <item>
      <title>Announcing Period 2 Exchange 2016/2019 Extended Security Update (ESU) program</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-period-2-exchange-2016-2019-extended-security-update/ba-p/4511603</link>
      <description>&lt;P&gt;While both Exchange 2016 and 2019 are&amp;nbsp;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/t-6-months-exchange-server-2016-and-exchange-server-2019-end-of-support/4403017" target="_blank" rel="noopener"&gt;out of support since October 2025&lt;/A&gt;, some of our customers who needed more time to finalize migrations to Exchange Subscription Edition (SE) have opted to enroll into the &lt;A href="https://techcommunity.microsoft.com/blog/exchange/announcing-exchange-2016--2019-extended-security-update-program/4433495" target="_blank" rel="noopener"&gt;Extended Security Update program&lt;/A&gt;. That ESU program started in October 2025 and is ending in April 2026 (“Period 1”).&lt;/P&gt;
&lt;P&gt;As end of April 2026 nears, some of our customers told us that they needed additional time to finalize their Exchange 2016/2019 migrations.&lt;/P&gt;
&lt;P&gt;Today we are announcing that we &lt;STRONG&gt;created a “Period 2” Exchange Server ESU program. This period will last from the start of May 2026 through the end of October 2026 (6 months)&lt;/STRONG&gt;. &lt;EM&gt;There will be no further extensions of this program after that&lt;/EM&gt;.&lt;/P&gt;
&lt;H4&gt;Conditions of Period 2 Exchange ESU program&lt;/H4&gt;
&lt;UL&gt;
&lt;LI&gt;Customers who wish to enroll into Period 2 program &lt;STRONG&gt;will have to re-purchase the Exchange ESU contract even if they were already enrolled into the Period 1 &lt;/STRONG&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/announcing-exchange-2016--2019-extended-security-update-program/4433495" target="_blank" rel="noopener"&gt;&lt;STRONG&gt;ESU program (October 2025 – April 2026)&lt;/STRONG&gt;&lt;/A&gt;. Period 2 is not an “extension” of current Period 1 Exchange ESU program (which ends in April 2026). Your organization does not automatically enroll into Period 2 – you will have to purchase the ESU again for additional 6-month coverage through October 2026 (in the same way that you purchased the original ESU).&lt;/LI&gt;
&lt;LI&gt;In Period 2, we plan to provide security updates for &lt;STRONG&gt;Exchange Server 2016 CU23 and Exchange Server 2019 CU14/CU15&lt;/STRONG&gt;.&lt;/LI&gt;
&lt;LI&gt;Any Exchange Server ESUs purchased starting with today’s date (April 15, 2026) will automatically be considered Period 2 and will be valid from May to October 2026. Your organization will receive information on how to download updates released under Period 2 ESU (your original ESU program instructions will not work for ESU updates released after April 2026).&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&lt;STRONG&gt;Starting today, customers can contact their Microsoft account team to get information about and purchase additional Period 2 Extended Security Update (ESU) for their Exchange 2016 CU23 or Exchange 2019 CU14/CU15 servers. Simply purchase the same product after today’s date.&lt;/STRONG&gt;&amp;nbsp;Your account teams will have information related to per server cost and additional details on how to purchase.&lt;/P&gt;
&lt;H4&gt;What does this mean?&lt;/H4&gt;
&lt;UL&gt;
&lt;LI&gt;This ESU is&amp;nbsp;&lt;EM&gt;not&lt;/EM&gt;&amp;nbsp;an “extension of the support lifecycle” (&lt;A href="https://learn.microsoft.com/en-us/lifecycle/" target="_blank" rel="noopener"&gt;Microsoft Lifecycle Policy | Microsoft Learn&lt;/A&gt;) for Exchange 2016 / 2019. Those servers are still out-of-support, and you will not be able to open support cases for them (unless directly related to an issue with an update released to ESU customers during the ESU period).&lt;/LI&gt;
&lt;LI&gt;This Period 2 ESU&amp;nbsp;&lt;EM&gt;is&lt;/EM&gt;&amp;nbsp;a way for customers who might not be able to finalize their Exchange 2016 or 2019 migrations to Exchange SE before the end of October 2026, to receive Critical and Important updates (as currently defined by&amp;nbsp;&lt;A href="https://www.microsoft.com/msrc/security-update-severity-rating-system" target="_blank" rel="noopener"&gt;Microsoft Security Response Center (MSRC) scoring&lt;/A&gt;) as security updates (SUs) that we might release during Period 2. If there are SUs that we need to release, we will&amp;nbsp;&lt;EM&gt;privately&lt;/EM&gt;&amp;nbsp;provide such SUs to ESU customers only.&lt;/LI&gt;
&lt;LI&gt;We are&amp;nbsp;&lt;EM&gt;not&lt;/EM&gt;&amp;nbsp;committing to actually releasing any SUs during the Period 2 ESU. Exchange Server does&amp;nbsp;&lt;A href="https://learn.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates" target="_blank" rel="noopener"&gt;not necessarily receive SU updates every month&lt;/A&gt;&amp;nbsp;on Patch Tuesday (2&lt;SUP&gt;nd&lt;/SUP&gt;&amp;nbsp;Tuesday of the month) as SUs are released only if there are Critical or Important security product changes. Therefore, if there are no SUs that we need to release during the time of ESU program, there will be no such updates provided. We will, however, confirm with ESU participants each Patch Tuesday whether an SU was provided or not.&lt;/LI&gt;
&lt;LI&gt;This Period 2 Exchange ESU will be valid until end of October 2026.&lt;/LI&gt;
&lt;/UL&gt;
&lt;H4&gt;Who is Period 2 Exchange ESU for?&lt;/H4&gt;
&lt;P&gt;This program is intended for customers with a &lt;A href="https://www.microsoft.com/en-us/licensing/licensing-programs/enterprise" target="_blank" rel="noopener"&gt;Microsoft Enterprise Agreement (EA)&lt;/A&gt; who are unable to finalize their Exchange 2016 or 2019 migrations to Exchange SE before end of April 2026 and still need Critical and Important security coverage for servers still in operation.&lt;/P&gt;
&lt;H1&gt;FAQs&lt;/H1&gt;
&lt;P&gt;&lt;STRONG&gt;Why does Microsoft require additional contract for Period 2 of Exchange ESU if our organization already has the original Exchange Server ESU?&lt;BR /&gt;&lt;/STRONG&gt;Period 2 is a separate contract that lasts until the end of October 2026. Many of our original ESU customers are finalizing their migrations by end of April 2026. Those few that need additional time have an option of getting a new ESU contract. Our preference is that our customers finalize their migrations instead (honestly – we’d be happy to not sell Period 2 Exchange ESU to anyone; please migrate instead!)&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Our organization did not purchase original Period 1 Exchange ESU (ending with April 2026). Can we purchase Period 2 ESU only?&lt;/STRONG&gt;&lt;BR /&gt;Period 2 ESU is separate from original Period 1 ESU and can be purchased independently. Purchasing the Period 2 ESU does not require purchase of Period 1. But note that purchase of Period 2 ESU will only get you update packages released after Period 2 starts. You will not get access to update packages released during Period 1 ESU. Seeing that&amp;nbsp;&lt;A href="https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-server-update-faq" target="_blank" rel="noopener"&gt;all our updates are cumulative&lt;/A&gt;, fixes for issues released during Period 1 ESU will be included in Period 2 updates (when / if released).&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;How is Exchange Server ESU licensed and how are updates distributed?&lt;BR /&gt;&lt;/STRONG&gt;Updates released under Period 2 Exchange ESU will follow the same process as updates released under the Period 1 ESU program: once enrolled, your organization will be provided information on how to access any updates released under Period 2. There will be no special licenses or keys in the Microsoft 365 admin center or Volume Licensing. After purchase of Period 2 SKUs, you will receive a new ESU User Guide which will contain everything you need.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Our Exchange server is getting throttled or blocked when sending email to Exchange Online. How can Microsoft not make ESU updates available to all customers, so they can address this?&lt;BR /&gt;&lt;/STRONG&gt;If your server is currently affected by &lt;A href="https://techcommunity.microsoft.com/blog/exchange/throttling-and-blocking-email-from-persistently-vulnerable-exchange-servers-to-e/3815328" target="_blank" rel="noopener"&gt;Throttling and blocking of persistently vulnerable Exchange servers&lt;/A&gt; that indicates that the &lt;A href="https://learn.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates" target="_blank" rel="noopener"&gt;version currently running&lt;/A&gt; in your organization is roughly a year out of date. To resolve the throttling or blocking immediately, please install October 2025 (last publicly available) updates for Exchange 2016 or 2019. &lt;EM&gt;ESU updates are not required&lt;/EM&gt;. There will come a day when October 2025 updates too will be throttled or blocked, but that is not currently the case. But note that even if you update to October 2025 updates your server is still out of support and out of date and you should migrate to a supported version ASAP.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Our organization has Microsoft Volume Licensing. Do we get the Exchange ESU automatically? Where can we buy Exchange ESU?&lt;/STRONG&gt; &lt;BR /&gt;Exchange ESU program is a separate contract that each organization must explicitly purchase via their Microsoft account team (requires &lt;A href="https://www.microsoft.com/en-us/licensing/licensing-programs/enterprise" target="_blank" rel="noopener"&gt;Microsoft Enterprise Agreement&lt;/A&gt;). Exchange ESU is not automatically included in Volume Licensing or Software Assurance.&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Help! We purchased the ESU (Period 1 or Period 2) – but we do not know how to access the updates we paid for!&lt;BR /&gt;&lt;/STRONG&gt;&lt;EM&gt;If you have already purchased the ESU&lt;/EM&gt;&amp;nbsp;and need information on accessing the latest Security Updates, please contact us by sending an email to&amp;nbsp;&lt;U&gt;ExchangeandSfBServerESUInquiry@service.microsoft.com&lt;/U&gt;. You are welcome to add your account team to the email also.&lt;/P&gt;
&lt;P&gt;Please continue migrating to Exchange SE instead of taking advantage of this Period 2 ESU program. But if you really must, contact your Microsoft account team for more details on Period 2 ESU.&lt;/P&gt;
&lt;P&gt;A similar program extension is available for our Skype for Business 2015 / 2019 customers. Please read more&amp;nbsp;&lt;A class="lia-internal-link lia-internal-url lia-internal-url-content-type-blog" href="https://techcommunity.microsoft.com/blog/skype_for_business_blog/announcing-%E2%80%9Cperiod-2%E2%80%9D-for-skype-for-business-server-20152019-extended-security-u/4511619" data-lia-auto-title="here" data-lia-auto-title-active="0" target="_blank"&gt;&lt;U&gt;here&lt;/U&gt;&lt;/A&gt;.&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;The Exchange Server Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 15 Apr 2026 14:35:11 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/announcing-period-2-exchange-2016-2019-extended-security-update/ba-p/4511603</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-04-15T14:35:11Z</dc:date>
    </item>
    <item>
      <title>No Exchange Server Security Updates for April 2026</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/no-exchange-server-security-updates-for-april-2026/ba-p/4511262</link>
      <description>&lt;P&gt;Although &lt;A href="https://techcommunity.microsoft.com/blog/exchange/support-for-exchange-server-2016-and-exchange-server-2019-ends-today/4461192" target="_blank"&gt;Exchange 2016 and 2019 are now out of support&lt;/A&gt;, some customers have purchased the&amp;nbsp;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/announcing-exchange-2016--2019-extended-security-update-program/4433495" target="_blank"&gt;Exchange 2016 and 2019 Extended Security Update (ESU)&lt;/A&gt;. We have therefore decided that until the end of this Exchange 2016 and 2019 ESU period (April 2026) we will make an explicit update related announcement even if we&amp;nbsp;&lt;EM&gt;DO NOT&lt;/EM&gt;&amp;nbsp;release anything for that&amp;nbsp;particular month.&lt;/P&gt;
&lt;P&gt;&lt;EM&gt;There are no security releases for any version of Exchange Server in April 2026, for customers with Exchange SE, or Exchange 2016 or 2019 ESU.&lt;/EM&gt;&lt;/P&gt;
&lt;P&gt;Please keep &lt;A href="https://techcommunity.microsoft.com/blog/exchange/upgrading-your-organization-from-current-versions-to-exchange-server-se/4241305" target="_blank"&gt;upgrading your organizations to Exchange SE&lt;/A&gt;.&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;The Exchange Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 14 Apr 2026 16:58:13 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/no-exchange-server-security-updates-for-april-2026/ba-p/4511262</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-04-14T16:58:13Z</dc:date>
    </item>
    <item>
      <title>Email Showing as Quarantined in a Message Trace, but Not Showing up in MS Defender</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/email-showing-as-quarantined-in-a-message-trace-but-not-showing/m-p/4510049#M17185</link>
      <description>&lt;P&gt;A customer of ours was waiting on an email to arrive and to help figure out where the email was or if it was sent yet we ran a message trace. The message trace showed that the email was sent to quarantine. With this information in mind, I went to MS Defender &amp;gt; Email &amp;amp; collaboration &amp;gt; Review &amp;gt; Quarantine but could not find the message.&amp;nbsp;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;I modified some of the filters and could not get the quarantined message to appear. I triple checked the filters I created and made sure the information was correct. I also removed all filters and looked for the time period the email came in, but could not find it.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Not sure if this is related, but this email had a significant delay likely coming from the sender.&lt;/P&gt;&lt;img /&gt;&lt;P&gt;&amp;nbsp; Any thoughts or ideas? Or anything that I am missing?&lt;/P&gt;</description>
      <pubDate>Thu, 09 Apr 2026 19:23:13 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/email-showing-as-quarantined-in-a-message-trace-but-not-showing/m-p/4510049#M17185</guid>
      <dc:creator>duntlessOutlook</dc:creator>
      <dc:date>2026-04-09T19:23:13Z</dc:date>
    </item>
    <item>
      <title>Administratively retract a user's email</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/administratively-retract-a-user-s-email/m-p/4509623#M17180</link>
      <description>&lt;P&gt;I was recently asked to retract a message that was sent in-error to staff. I ran a discovery/search, and saved it, but when I ran the powershell script after connecting to Exchange, the script could not find the search, something like name not found.&amp;nbsp; I verfied the name was correct, and I am a global admin so permissions should not have been an issue.&lt;/P&gt;&lt;P&gt;Does anyone know of any accurate documentation to run a search and retract? I had to use an old YouTube video and could not find anything in Microsoft's documentation.&amp;nbsp;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Wed, 08 Apr 2026 12:12:12 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/administratively-retract-a-user-s-email/m-p/4509623#M17180</guid>
      <dc:creator>TomCSB</dc:creator>
      <dc:date>2026-04-08T12:12:12Z</dc:date>
    </item>
    <item>
      <title>ARC verification fail (40) on specific Exchange Online frontends - recurring issue</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/arc-verification-fail-40-on-specific-exchange-online-frontends/m-p/4508856#M17177</link>
      <description>&lt;P&gt;Hello,&lt;BR /&gt;We are observing recurring arc=fail (40) errors on messages forwarded through Exchange Online, caused by specific frontend servers. The same messages pass ARC verification correctly on other providers (Google, etc.).&lt;/P&gt;&lt;P&gt;Affected frontends identified so far:&lt;/P&gt;&lt;UL&gt;&lt;LI&gt;CH2PEPF0000013F.namprd02.prod.outlook.com - build 15.20.9700.17 (March 14, 2026)&lt;/LI&gt;&lt;LI&gt;CH3PEPF0000000B.namprd04.prod.outlook.com - build 15.20.9769.17 (April 6, 2026)&lt;/LI&gt;&lt;/UL&gt;&lt;P&gt;Both share the same build suffix .17. The signing implementation on our side has been cryptographically verified as correct and RFC 6376 compliant. The issue has also been reported on the IETF ietf-smtp mailing list with full technical analysis.&lt;BR /&gt;Cryptographic analysis shows the failing servers append a spurious trailing \r\n to the last header before computing the verification hash, violating RFC 6376 Section 3.7.&lt;/P&gt;&lt;P&gt;Is there a pattern with .17 frontend builds and ARC verification?&lt;BR /&gt;&lt;BR /&gt;Reagards&lt;BR /&gt;Vittorio&lt;/P&gt;</description>
      <pubDate>Mon, 06 Apr 2026 10:56:42 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/arc-verification-fail-40-on-specific-exchange-online-frontends/m-p/4508856#M17177</guid>
      <dc:creator>darkglobe</dc:creator>
      <dc:date>2026-04-06T10:56:42Z</dc:date>
    </item>
    <item>
      <title>Microsoft Exchange Report</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/microsoft-exchange-report/m-p/4508769#M17176</link>
      <description>&lt;P&gt;I faced a new issue today, don't know if anything breaks at Microsoft or any new thing roll out from there, the things is unable to check usage report properly as well as unable to export the email activity, Mailbox Usage etc report under report- exchange and other tabs as well in customer tenant.&lt;/P&gt;&lt;P&gt;I have Global Reader privilege but still facing this issue. Anyone faced this type of issue from today or before? If anyone knows about its pleas update your comment here.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Thanks..&lt;/P&gt;</description>
      <pubDate>Sun, 05 Apr 2026 12:27:58 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/microsoft-exchange-report/m-p/4508769#M17176</guid>
      <dc:creator>atanudutta007</dc:creator>
      <dc:date>2026-04-05T12:27:58Z</dc:date>
    </item>
    <item>
      <title>iOS 26.4 iPhone Contact Sync with Microsoft Exchange Online</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/ios-26-4-iphone-contact-sync-with-microsoft-exchange-online/m-p/4507690#M17173</link>
      <description>&lt;P&gt;For the past 2–3 weeks, several of our iOS users have been experiencing synchronization issues with Exchange contacts. Contacts intermittently disappear from their devices and then re-sync after some time. In some cases, the re-synchronization process is significantly delayed. Anyone else experiencing the same issue?&lt;/P&gt;</description>
      <pubDate>Wed, 01 Apr 2026 12:59:26 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/ios-26-4-iphone-contact-sync-with-microsoft-exchange-online/m-p/4507690#M17173</guid>
      <dc:creator>fbatuns</dc:creator>
      <dc:date>2026-04-01T12:59:26Z</dc:date>
    </item>
    <item>
      <title>Preserving permissions during EXO migration</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/preserving-permissions-during-exo-migration/m-p/4507521#M17170</link>
      <description>&lt;P&gt;Hi,&lt;/P&gt;&lt;P&gt;Can you help me understand the outcome of preserving the permissions in our scenario.&lt;BR /&gt;&lt;BR /&gt;Exchange Server 2016 (soon Exchange SE) in a hybrid with Exchange Online.&lt;BR /&gt;We are moving 75% of the mailboxes to Exchange Online.&lt;BR /&gt;&lt;BR /&gt;What ways will preserve or break the full-access or sendas permissions?&lt;/P&gt;&lt;P&gt;I guess best way would be to migrate both the user and the shared mailbox at the same time in the same batch to keep the permission?&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;If we migrate the user in batch 1 and shared mailbox in batch 2 will that preserve/break the full access/send as?&lt;/P&gt;&lt;P&gt;If we migrate the shared mailbox in batch 1 and usermailbox in batch 2 will that preserve/break the full access/send as?&lt;/P&gt;&lt;P&gt;If the permission is linked directly on the shared mailbox or via a security group is there a difference?&lt;/P&gt;&lt;P&gt;Thanks!&lt;/P&gt;</description>
      <pubDate>Wed, 01 Apr 2026 06:46:40 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/preserving-permissions-during-exo-migration/m-p/4507521#M17170</guid>
      <dc:creator>Naxiu</dc:creator>
      <dc:date>2026-04-01T06:46:40Z</dc:date>
    </item>
    <item>
      <title>High Volume Email reaches General Availability in Exchange Online</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/high-volume-email-reaches-general-availability-in-exchange/ba-p/4507353</link>
      <description>&lt;P&gt;As we discussed High Volume Email (HVE) several times since it was in&amp;nbsp;&lt;A class="lia-internal-link lia-internal-url lia-internal-url-content-type-blog" href="https://techcommunity.microsoft.com/blog/exchange/public-preview-high-volume-email-for-microsoft-365/4102271" target="_blank" rel="noopener" data-lia-auto-title="Public Preview" data-lia-auto-title-active="0"&gt;Public Preview&lt;/A&gt;, I wanted to make you aware that Exchange Online HVE now reached General Availability (GA) &lt;SPAN data-teams="true"&gt;in our multi-tenant (WW) service&lt;/SPAN&gt;. The announcement was made on the Microsoft 365 Blog here:&lt;/P&gt;
&lt;P&gt;&lt;A class="lia-internal-link lia-internal-url lia-internal-url-content-type-blog" href="https://techcommunity.microsoft.com/blog/microsoft_365blog/high-volume-email-is-now-available-in-exchange-online/4505302" target="_blank" rel="noopener" data-lia-auto-title="High Volume Email Is Now Available in Exchange Online" data-lia-auto-title-active="0"&gt;High Volume Email Is Now Available in Exchange Online&lt;/A&gt;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Pricing is discussed in the announcement above.&lt;/LI&gt;
&lt;LI&gt;HVE documentation can be found &lt;A class="lia-external-url" href="https://learn.microsoft.com/en-us/exchange/mail-flow-best-practices/high-volume-mails-m365" target="_blank" rel="noopener"&gt;here&lt;/A&gt;.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;Nino Bilic&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Wed, 01 Apr 2026 13:25:49 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/high-volume-email-reaches-general-availability-in-exchange/ba-p/4507353</guid>
      <dc:creator>Nino_Bilic</dc:creator>
      <dc:date>2026-04-01T13:25:49Z</dc:date>
    </item>
    <item>
      <title>Microsoft Limits App Access to Sensitive Message Properties</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/microsoft-limits-app-access-to-sensitive-message-properties/m-p/4505943#M17168</link>
      <description>&lt;P&gt;Microsoft has announced details of a change to app permissions to restrict updates to sensitive message properties (like recipients) without consent for a new advanced mail access permission. If tenants have apps that interact with message properties, including apps developed by third parties, they should check whether the apps are updating sensitive properties. If so, the new permission must be assigned or the apps will stop working.&lt;/P&gt;
&lt;P&gt;https://office365itpros.com/2026/03/26/sensitive-message-properties-graph/&lt;/P&gt;</description>
      <pubDate>Thu, 26 Mar 2026 13:43:43 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/microsoft-limits-app-access-to-sensitive-message-properties/m-p/4505943#M17168</guid>
      <dc:creator>TonyRedmond</dc:creator>
      <dc:date>2026-03-26T13:43:43Z</dc:date>
    </item>
    <item>
      <title>Can we hide default address lists in Outlook Address Book and show only custom ones?</title>
      <link>https://techcommunity.microsoft.com/t5/exchange/can-we-hide-default-address-lists-in-outlook-address-book-and/m-p/4505398#M17166</link>
      <description>&lt;img /&gt;&lt;P&gt;There are existing Custom Address Lists. When users use the MS Outlook App (Office 2019) and open the Address Book, is it possible to hide the other address lists (including domain-sg-GAL, Global Address List, and domain-sg-Rooms), and only display the Custom Address Lists (domain-HK-AL and domain-sg-AL) — the ones shown in green in the photo?&lt;/P&gt;</description>
      <pubDate>Wed, 25 Mar 2026 07:05:00 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange/can-we-hide-default-address-lists-in-outlook-address-book-and/m-p/4505398#M17166</guid>
      <dc:creator>Como_L</dc:creator>
      <dc:date>2026-03-25T07:05:00Z</dc:date>
    </item>
    <item>
      <title>Upcoming Breaking Changes to Modifying Sensitive Email Properties via Graph API</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/upcoming-breaking-changes-to-modifying-sensitive-email/ba-p/4505227</link>
      <description>&lt;P&gt;We are implementing a significant update in our service affecting applications that modify sensitive properties on non-draft email messages. These sensitive properties include the subject, body, recipients, and a number of other properties when changed using any of the &lt;A href="https://learn.microsoft.com/graph/api/message-update?view=graph-rest-1.0&amp;amp;tabs=http" target="_blank"&gt;message update methods on Graph API&lt;/A&gt;.&lt;/P&gt;
&lt;H4&gt;Immutability of Received Email Messages&lt;/H4&gt;
&lt;P&gt;There is a fundamental expectation that once an email message has been received, it should remain unchanged except for specific management-related properties such as read status, flags, and similar attributes. Critical components like the address list, subject, and body text should not be altered unless a new draft message is created. Exceptions to this rule are specialized use-cases, particularly within the security domain, such as identifying suspicious emails and other privileged operations.&lt;/P&gt;
&lt;H4&gt;Required Permissions for Modifying Sensitive Properties&lt;/H4&gt;
&lt;P&gt;To maintain the expected immutability of email messages during standard management operations, we will begin restricting applications from modifying sensitive message properties in non-draft messages unless they possess elevated permissions. Specifically, applications must have one of the following permissions: &lt;A href="https://learn.microsoft.com/graph/permissions-reference#mail-advancedreadwrite" target="_blank"&gt;Mail-Advanced.ReadWrite&lt;/A&gt;, &lt;A href="https://learn.microsoft.com/graph/permissions-reference#mail-advancedreadwriteall" target="_blank"&gt;Mail-Advanced.ReadWrite.All&lt;/A&gt;, or &lt;A href="https://learn.microsoft.com/graph/permissions-reference#mail-advancedreadwriteshared" target="_blank"&gt;Mail-Advanced.ReadWrite.Shared&lt;/A&gt;, depending on the scenario. All these permissions require a tenant administrator consent.&lt;/P&gt;
&lt;P&gt;The &lt;A href="https://learn.microsoft.com/graph/api/message-update?view=graph-rest-1.0&amp;amp;tabs=http" target="_blank"&gt;documentation page&lt;/A&gt; identifies sensitive properties as those that are only updateable if isDraft = true. Once the restriction goes into effect, these properties can only be updated in non-draft messages if the application has Mail-Advanced.ReadWrite permissions. Draft messages will continue to be updateable with the current Mail.ReadWrite permissions.&lt;/P&gt;
&lt;H4&gt;Timeline and Recommendations&lt;/H4&gt;
&lt;P&gt;These required permissions are already available. Enforcement of the new restrictions in our service – blocking Graph API updates to sensitive email properties – will begin on &lt;STRONG&gt;12/31/2026&lt;/STRONG&gt;. If you develop Graph API applications that modify these properties, we strongly recommend updating your applications to request the necessary higher-level permissions as soon as possible. This proactive approach will help ensure a smooth transition and minimize potential disruptions for your customers.&lt;/P&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;The Exchange Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Tue, 24 Mar 2026 16:05:53 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/upcoming-breaking-changes-to-modifying-sensitive-email/ba-p/4505227</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-03-24T16:05:53Z</dc:date>
    </item>
    <item>
      <title>Celebrating 30 Years of Microsoft Exchange</title>
      <link>https://techcommunity.microsoft.com/t5/exchange-team-blog/celebrating-30-years-of-microsoft-exchange/ba-p/4503439</link>
      <description>&lt;P&gt;It’s hard to believe, but Exchange Server is now 30 years old! A lot has changed since the first release of Exchange Server 4.0 in 1996: protocols, platforms, scale, and even what “email” means in the modern workplace.&lt;/P&gt;
&lt;P&gt;To commemorate this milestone anniversary, we want to pause and reflect on how Exchange has shaped enterprise email as we know it today.&lt;/P&gt;
&lt;H4&gt;The start: email becomes enterprise messaging&lt;/H4&gt;
&lt;P&gt;Back in the mid-1990s, messaging solutions were fragmented, proprietary, and difficult to manage at scale. Businesses looking for a messaging system basically had two choices: host-based systems that were costly and didn’t integrate well with PC-based applications or LAN-based systems that did integrate with PC-based applications but were less scalable and reliable (although there were several companies that made software that allowed different email systems to communicate).&lt;/P&gt;
&lt;P&gt;That changed when, after nearly four years of development, Microsoft Exchange Server 4.0 – “the e-mail server with integrated groupware that makes it easy to communicate” – was released on April 2, 1996. Or, it might have been March 1996. Or maybe June 1996. &lt;A href="https://youtu.be/w_BvYIG1g8c?t=11" target="_blank" rel="noopener"&gt;No one knows for sure&lt;/A&gt; because the first public build that was shipped was not the build on the gold master (the signed-off RTM version).&lt;/P&gt;
&lt;P&gt;Nonetheless, Exchange Server had ambitions! From the start, it combined email and calendaring as well as an integrated centralized directory. Admin controls and native support of Internet standards like SMTP (via Internet Mail Connector) and X.400 kept it “modern.”&lt;/P&gt;
&lt;P&gt;In addition to user productivity through email, Exchange provided admin controls for monitoring, managing, and troubleshooting messaging across an entire organization from a single system – an idea that now seems obvious, but was far from standard in 1996.&lt;/P&gt;
&lt;img /&gt;
&lt;H4&gt;Exchange shapes the market&lt;/H4&gt;
&lt;P&gt;As Exchange evolved through the late 1990s and early 2000s, it kept raising the bar for business email. It was during this time that several major changes occurred:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Email and user identity became inseparable. This directly influenced the development of Active Directory (Active Directory was the direct descendant of the Exchange Directory Service).&lt;/LI&gt;
&lt;LI&gt;Calendaring and scheduling were first-class workflows and not bolt-on experiences.&lt;/LI&gt;
&lt;LI&gt;Reliability, scale, and disaster recovery became built-in&lt;/LI&gt;
&lt;LI&gt;Administrators came to expect the ability to automate admin tasks.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;Exchange Server became one of Microsoft’s first&amp;nbsp;&lt;EM&gt;truly&lt;/EM&gt; &lt;EM&gt;successful&lt;/EM&gt; enterprise server products, helping establish us as a serious enterprise platform provider beyond the desktop.&lt;/P&gt;
&lt;H4&gt;The foundation of Exchange Online&lt;/H4&gt;
&lt;P&gt;When we set out to build Exchange Online (remember &lt;A href="https://techcommunity.microsoft.com/blog/exchange/microsoft-exchange-labs/590838" target="_blank" rel="noopener"&gt;Exchange Labs&lt;/A&gt;?), the goal was to operate enterprise email as a global service.&lt;/P&gt;
&lt;P&gt;Exchange Online inherited many years of lessons from Exchange Server as it &lt;EM&gt;extended&lt;/EM&gt; to the service. That continuity of experience is one reason our customers were able to move from Exchange Server to Exchange Online more confidently as they worked with already familiar tools. Concepts such as mailboxes, the transport pipeline, policy enforcement, and compliance remained familiar, even as the operational model changed. Exchange quite literally became the backbone of Microsoft 365’s compute, routing, and storage (also known as the Substrate).&lt;/P&gt;
&lt;H4&gt;Exchange Server still matters in 2026&lt;/H4&gt;
&lt;P&gt;Three decades later, Exchange Server still matters. Conversations around digital sovereignty, regulatory compliance, and admin control continue. Many organizations like governments, regulated industries, and critical infrastructure providers must make choices about where their data is stored and who operates the infrastructure.&lt;/P&gt;
&lt;P&gt;For customers that need it, Exchange Server remains valuable as an architectural choice. Continued investment in Exchange Server, including &lt;A href="https://techcommunity.microsoft.com/blog/exchange/exchange-server-subscription-edition-se-is-now-available/4424924" target="_blank" rel="noopener"&gt;release&lt;/A&gt; of Exchange Subscription Edition (SE) which we are committed to supporting until &lt;EM&gt;at least&lt;/EM&gt; the &lt;A href="https://learn.microsoft.com/en-us/lifecycle/additional-support-server-modern-lifecycle-policy" target="_blank" rel="noopener"&gt;end of 2035&lt;/A&gt; reflect the reality that enterprise messaging is not one-size-fits-all.&lt;/P&gt;
&lt;P&gt;Cloud-first (where innovation is the fastest) does not need to mean cloud-only. Whether you want to run on-prem, hybrid, or cloud, Exchange is there for you.&lt;/P&gt;
&lt;H4&gt;Through it all, community helped shape Exchange&lt;/H4&gt;
&lt;P&gt;While this is a bit intangible, we want to acknowledge that feedback from Exchange admins, MVPs, partners, and customers influenced (and keep influencing) Exchange in real ways. Feedback via our blog (&lt;A href="https://techcommunity.microsoft.com/blog/exchange/first-post-of-the-microsoft-exchange-team-blog/610912" target="_blank" rel="noopener"&gt;since the first post&lt;/A&gt;, back in 2004), support cases, and feedback given through conferences or &lt;A href="https://feedbackportal.microsoft.com/feedback/forum/778c4eb5-6bd1-ec11-a7b5-0022481f35a4" target="_blank" rel="noopener"&gt;Feedback portal&lt;/A&gt; over the years really matter. Some design changes happened specifically because the community spoke clearly. Our teams staying involved (via, for example, this blog) has been &lt;EM&gt;extremely&lt;/EM&gt; valuable to us. Please keep giving us feedback!&lt;/P&gt;
&lt;H4&gt;How things are changing&lt;/H4&gt;
&lt;P&gt;&lt;STRONG&gt;Exchange backward compatibility was both a gift and a burden.&lt;/STRONG&gt; For many years, we allowed customers to have coexistence of 3 major Exchange versions within the same organization. This helped reduce migration pain. But it also slowed down architectural cleanup and modernization as every version had to play nice with choices made years earlier. We are looking forward to the future in which we support only a single major version inside an organization – Exchange Subscription Edition (SE) – a requirement we are &lt;A href="https://techcommunity.microsoft.com/blog/exchange/upgrading-your-organization-from-current-versions-to-exchange-server-se/4241305" target="_blank" rel="noopener"&gt;adding starting with Exchange SE CU2&lt;/A&gt;!&lt;/P&gt;
&lt;P&gt;&lt;STRONG&gt;Security came into focus over the years. It is still in focus.&lt;/STRONG&gt; Early Exchange was built for connectivity and collaboration. The threat model changed, with threat actors going after organizational email. It is more &lt;A href="https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/security-best-practices/exchange-server-update-faq" target="_blank" rel="noopener"&gt;important&lt;/A&gt; than ever to &lt;A href="https://learn.microsoft.com/en-us/exchange/new-features/build-numbers-and-release-dates" target="_blank" rel="noopener"&gt;stay up to date&lt;/A&gt;. We realize that some upcoming security changes mean that admins need to do additional work (for example upcoming &lt;A href="https://techcommunity.microsoft.com/blog/Exchange/exchange-server-security-changes-for-hybrid-deployments/4396833" target="_blank" rel="noopener"&gt;hybrid security improvements&lt;/A&gt;), but the result will be your organization’s improved security posture.&lt;/P&gt;
&lt;P&gt;With all the modes of communication that have become popular in business environments over the last 3 decades, the “end of email” has been predicted many times. Yet, email is still alive. And judging by our inboxes, it’s thriving!&lt;/P&gt;
&lt;P&gt;We want to thank the admins, MVPs, partners, and customers who keep Exchange running and who’ve provided unfiltered feedback along the way. We are excited to continue this journey with you!&lt;/P&gt;
&lt;P&gt;Here are a few fun Exchange historical posts that you might have missed over the years:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/a-brief-history-of-time---exchange-server-way/589388" target="_blank" rel="noopener"&gt;A brief history of time - Exchange Server way&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/exchange-is-10-years-old/605347" target="_blank" rel="noopener"&gt;Exchange is 10 years old!&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/top-10-moments-in-20-years-of-exchange-server/605935" target="_blank" rel="noopener"&gt;Top 10 Moments in 20 Years of Exchange Server&lt;/A&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;And a few technology-specific fun posts related to Exchange history:&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/from-crush-to-product-documentation-the-story-of-squeaky-lobster/604691" target="_blank" rel="noopener"&gt;From crush to product documentation: The story of Squeaky Lobster&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/me-too/610643" target="_blank" rel="noopener"&gt;Me Too!&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/why-is-oof-an-oof-and-not-an-ooo/610191" target="_blank" rel="noopener"&gt;Why is OOF an OOF and not an OOO?&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/how-the-m-drive-came-about/610911" target="_blank" rel="noopener"&gt;saga of the M: drive&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/why-we-named-a-bit-in-the-directory-after-billg/610058" target="_blank" rel="noopener"&gt;BillG bit in AD&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/the-autodiscover-song/585066" target="_blank" rel="noopener"&gt;Autodiscover Song&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;How the &lt;A href="https://techcommunity.microsoft.com/blog/exchange/exchange-server-2007---the-making-of-an-icon/599845" target="_blank" rel="noopener"&gt;Exchange 2007 icon was made&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The excitement of &lt;A href="https://techcommunity.microsoft.com/blog/exchange/dogfood-at-home---living-the-life-/594917" target="_blank" rel="noopener"&gt;dogfooding Exchange at home&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/the-secret-decoder-ring---the-hidden-truth-in-the-exchange-2007-admin-and-routin/604055" target="_blank" rel="noopener"&gt;secret decoder ring&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/decoder-ring-where-are-you/587094" target="_blank" rel="noopener"&gt;other secret decoder ring&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The &lt;A href="https://techcommunity.microsoft.com/blog/exchange/how-does-your-exchange-garden-grow/609194" target="_blank" rel="noopener"&gt;2.4 GB message successfully delivered by Exchange Server 2003&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;The Exchange Team &lt;A href="https://techcommunity.microsoft.com/blog/exchange/here-is-your-citation-wikipedia/602827" target="_blank" rel="noopener"&gt;answering the citation call from Wikipedia&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://learn.microsoft.com/en-us/archive/blogs/perryclarke/" target="_blank" rel="noopener"&gt;Ask Perry/Geek Out with Perry&lt;/A&gt;&lt;/LI&gt;
&lt;LI&gt;&lt;A href="https://techcommunity.microsoft.com/blog/exchange/ese-sql-and-your-feedback/600083" target="_blank" rel="noopener"&gt;Investigating replacing ESE with SQL&lt;/A&gt;&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&lt;SPAN class="lia-text-color-12"&gt;The Exchange Team&lt;/SPAN&gt;&lt;/P&gt;</description>
      <pubDate>Mon, 23 Mar 2026 17:00:06 GMT</pubDate>
      <guid>https://techcommunity.microsoft.com/t5/exchange-team-blog/celebrating-30-years-of-microsoft-exchange/ba-p/4503439</guid>
      <dc:creator>The_Exchange_Team</dc:creator>
      <dc:date>2026-03-23T17:00:06Z</dc:date>
    </item>
  </channel>
</rss>

