MC1191578 – (Updated) Update to EWS Access for Kiosk / Frontline Worker Licenses

Product:

Exchange, Microsoft 365 Apps

Platform:

Online, Web, World tenant

Status:

Change type:

Admin impact, Updated message, User impact

Links:

Details:

Summary:
Starting June 30, 2026, EWS access will be blocked for mailboxes licensed only with Exchange Online Kiosk, Microsoft 365/Office 365 F1, or F3. To maintain EWS access, users must be assigned licenses with EWS rights, such as Exchange Online Plan 1/2 or Microsoft 365 E3/E5.

Details:
Updated December 15, 2025: We have updated the timing of this change to provide additional time for customers to take action as appropriate. Thank you for your feedback.
We're making some changes to Exchange Web Services (EWS).
Starting June 30, 2026, we will start to block EWS access for all mailboxes without license rights to EWS. This is another step in our ongoing commitment to enhance the security and control mechanisms of EWS.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2025-12-03

updated:
2025-12-18

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only

summary for non-techies**

XXXXXXX ... free basic plan only

Direct effects for Operations**

Loss of EWS Access
Users with Kiosk or F1/F3 licenses will lose access to EWS, impacting their ability to integrate applications that rely on EWS for email functionalities.
   - roles: Frontline Workers, IT Administrators
   - references: https://aka.ms/EWSLicenseChanges

Increased Support Requests
The change will likely lead to an increase in support requests from users who are unaware of the licensing requirements, causing strain on IT support resources.
   - roles: IT Support Staff, Helpdesk Technicians
   - references: https://aka.ms/EWSLicenseChanges

Disruption of Workflows
Users relying on EWS for automated workflows or third-party applications will face disruptions, potentially halting business processes.
   - roles: Business Analysts, Operations Managers
   - references: https://aka.ms/EWSLicenseChanges

User Frustration
Users may experience frustration and decreased productivity due to sudden loss of access to EWS without prior notice or preparation.
   - roles: End Users, Team Leaders
   - references: https://aka.ms/EWSLicenseChanges

Compliance Risks
Organizations may face compliance risks if users cannot access necessary email data through EWS, impacting data retention and reporting.
   - roles: Compliance Officers, Data Protection Officers
   - references: https://aka.ms/EWSLicenseChanges

Configutation Options**

XXXXXXX ... paid membership only

Opportunities**

Upgrade Licensing for Enhanced Functionality
By upgrading licenses for frontline workers from Kiosk or F1/F3 to E3/E5 or Exchange Online Plan 1/2, organizations can provide these users with EWS access, allowing for improved integration with other applications and enhanced email management capabilities.
   - next-steps: Assess the current licensing situation of frontline workers and calculate the costs associated with upgrading licenses. Prepare a proposal for management outlining the benefits of upgraded access and potential ROI.
   - roles: IT Administrators, Finance Managers, HR Managers
   - references: https://aka.ms/EWSLicenseChanges

Training and Support for Transitioning Users
Implementing training programs for users transitioning to new licenses will help minimize disruption and ensure users are aware of new features and functionalities available to them, improving overall user experience and productivity.
   - next-steps: Develop a training plan that includes workshops, online resources, and one-on-one support sessions. Gather feedback from users post-training to refine future sessions.
   - roles: Training Coordinators, IT Support Staff, Department Managers
   - references: https://www.microsoft.com/en-us/microsoft-365/blog/2021/03/30/what-to-know-about-microsoft-365-licensing-and-employee-experience/

Evaluate Alternative Email Solutions
Explore alternative email solutions or platforms that may offer more cost-effective licensing structures while still providing the necessary features for frontline workers, potentially reducing overall IT costs in the long run.
   - next-steps: Conduct a market analysis of alternative email solutions that fit the organization's needs and budget. Prepare a comparative analysis report to present to stakeholders.
   - roles: IT Managers, Procurement Officers, Business Analysts
   - references: https://www.gartner.com/en/information-technology/insights/cloud-office-email-solutions

Potentional Risks**

XXXXXXX ... paid membership only

IT Security**

XXXXXXX ... paid membership only

explanation for non-techies**

Imagine you have a key that opens a special door in your office building. This door leads to a room where you can access important files and resources. Now, let's say that the building management decides that only certain types of keys will be allowed to open this door starting in 2026. If you have a key that doesn't meet the new requirements, you won't be able to enter the room anymore.

This is similar to the changes happening with Exchange Web Services (EWS) access for certain Microsoft licenses. EWS is like that special door, and the licenses are the keys. Currently, some licenses, like Exchange Online Kiosk or Microsoft 365/Office 365 F1 and F3, are like keys that technically shouldn't open the door, but they do. Starting June 30, 2026, these keys will no longer work unless they are upgraded to a license that includes EWS access rights, such as Exchange Online Plan 1/2 or Microsoft 365 E3/E5.

If you want to keep accessing the resources behind that door, you'll need to get a new key, or in this case, a new license that includes EWS access. If you try to use the old key after the change, you'll be met with a "door locked" message, similar to receiving an HTTP 403 response when trying to access EWS without the proper license.

This change is being made to enhance security and ensure that only authorized users have access to certain services. It's important to review the licenses your team is using and make any necessary updates before the deadline to avoid disruptions in access.