Hey folks! With Microsoft planning to phase out Exchange Web Services (EWS) for Exchange Online starting October 2026, I'm trying to get ahead of the migration process. Microsoft has made it clear that starting October 1, 2026, EWS will be blocked by default for tenants that don't have an explicit Allow List in place.
I'm particularly worried about solutions like Veeam, Barracuda, and AvePoint that rely on EWS for backup and SaaS protection, as well as any custom scripts that need EWS for detailed mailbox data access.
For those of you who have already made the switch to the Graph API or have talked to your backup vendors about this:
- Have you hit any roadblocks where your backup tool can't perform certain tasks with Graph that it could do with EWS, like accessing Public Folders, specific metadata, or dealing with throttling issues?
- Did anyone experience scream test failures during their early testing phases?
- Has anyone begun experimenting with the new AppID-based Allow List that's expected to roll out in early 2026?
I'd love to hear from anyone who's made the transition or is stuck waiting for vendor updates. Thanks a bunch!
4 Answers
Veeam is transitioning from EWS to the Graph API for mailbox protection, and they're on track to have everything ready before Microsoft’s cutoff date. Just keep in mind that not all features have moved to Graph yet, and some API endpoints are still in beta, which can be risky for prod releases.
I reached out to my Cisco rep to get info on what they're planning for Cisco Unity Single Inbox, but I haven’t heard back from them yet.
AvePoint sent out an email update regarding this issue last week. You can check it out [here](https://www.avepoint.com/blog/manage/ews-to-microsoft-graph-transition-update). Just a heads-up, I was confused by the part about needing to 'reauthorize your AvePoint applications'—can anyone clarify what that means?
We've reached out to every vendor, and the standard response is 'we're working on it and will let you know when the update's ready.' It's frustrating knowing I'm not the only one struggling to stay ahead of things!
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures