Skip to content
ThreatCluster

Microsoft to Block EWS Access for Certain License Holders in March 2026

First seen 4 Dec 2025, 00:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •March 12, 2026 at 13:27 UTC

Microsoft has announced that starting in March 2026, it will block Exchange Web Services (EWS) access for users without the appropriate license rights. Affected users include those with only Microsoft 365 or Office 365 F1 or F3 licenses for frontline workers, as well as Exchange Online Kiosk license holders. This change will restrict access to mailboxes and data stores in Exchange Online and Exchange Server.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 211d ago How this analysis works

More articles in this cluster (2)

Following this threat?

Track Midnight Blizzard in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed