Update on the EWS to Microsoft Graph Transition: Accelerated Timelines and Next Steps
In our previous blog post, we shared that Microsoft is retiring Exchange Web Services (EWS) in Exchange Online by October 2026, transitioning entirely to the modern Microsoft Graph API. We promised to keep you informed every step of the way, and today we have an important update regarding an accelerated timeline for specific licenses and a small action required on your part.
As your dedicated IT provider, IssTech—alongside our trusted partner AvePoint—is staying one step ahead to ensure your IssProtect for Cloud backups and data management remain completely uninterrupted.
Here is what you need to know about the latest Microsoft update and our roadmap for a seamless transition.
What's New? Accelerated Deadlines for Frontline Workers
Microsoft recently announced that EWS access for specific frontline worker licenses will be deprecated earlier than the general population. If your organization utilizes Exchange Online Kiosk, Microsoft 365 F1, or Office 365 F1 and F3 licenses, EWS access for these accounts will be retired at the end of June 2026.
While the broader retirement of EWS for all other licenses is still scheduled for October 2026, this move underscores Microsoft’s commitment to accelerating the shift to the Graph API.
Action Required: Time to Re-Authorize
In our previous update, we mentioned that while no immediate action was required at the time, you would eventually need to approve new Microsoft Graph permissions. That time has now come.
We are handling the heavy lifting of the code migration and engineering, but there is one simple step you must take to ensure a smooth path forward:
- Action Needed: Following the upcoming February release (rolling out February 8th, 2026 for commercial environments), you will need to re-authorize your AvePoint applications within your tenant to accept the new Microsoft Graph permission scopes.
- Why now? While these permissions won't be actively utilized immediately, setting them up now provides the necessary foundation for the updates taking effect later this year.
If you need guidance on how to re-authorize your applications, IssTech support is standing by to help you through the process step-by-step.
Our Roadmap for IssProtect for Cloud
To guarantee that your backups are fully prepared well in advance of Microsoft's deadlines, we have established a proactive, phased release schedule:
- Phase 1: Preparation (February 2026 Release) App permissions are updated to include the necessary scopes for Microsoft Graph. (This is where your re-authorization comes in!)
- Phase 2: Targeted Transition (June 2026 Release) Code for IssProtect for Cloud will be officially updated to interact via Microsoft Graph for the three frontline mailbox types specified by Microsoft (Kiosk, F1, and F3). This ensures these users remain fully protected as the early EWS deprecation takes effect.
- Phase 3: Final Integration (August 2026 Release) Code will be updated to interact with Microsoft Graph for all remaining mailbox license types, securing your entire environment well before Microsoft's final October 2026 deadline.
We Are Here to Help
Our goal is to make this shift practically invisible to your daily operations. By taking a few minutes to re-authorize your permissions this February, you ensure a "no surprises" transition for your organization.
If you have any questions about this update, the timeline, or how to re-authorize your applications, please do not hesitate to reach out to the IssTech team.
Stay Informed!
Want to ensure you never miss a critical update about your IT environment? Subscribe to the IssTech newsletter to get the latest tech news, security updates, and service announcements delivered straight to your inbox!