September Allow-List Review
A fixed-scope written review for MSP portfolios and critical single tenants: supplied EWS usage evidence reconciled against the current EwsAllowedAppIDs snapshot and delivered as a dated decision record.
Beginning 1 October 2026, Microsoft rolls out updated EWS behavior tenant by tenant rather than changing every tenant on one known day.
For EwsEnabled=true, if EwsAllowedAppIDs is absent, Microsoft creates a list shortly before the new logic reaches that tenant, using observed usage from the previous 60 days.
For EwsEnabled=null, Microsoft creates a missing list a few days before changing that tenant to EwsEnabled=false; the list may not appear until later in October.
Microsoft says it will not overwrite or change a customer-managed list. That list remains authoritative for the tenant. A Microsoft-generated list may omit infrequent applications and retain applications the administrator does not want, so it is evidence to review rather than a business decision.
Read the source-backed state matrix and multi-tenant checklist in the MSP guide.
Sources checked 7 September 2026: Take control of your EWSAllowedAppIDs list before EWS access changes — Exchange Team Blog· Deprecation of Exchange Web Services in Exchange Online — Microsoft Learn
One written pass, with the unknowns left visible
The local-first review uses only supplied evidence. It does not connect to or test a live tenant.
Scope
Confirm the tenant count, available evidence, retention window and responsible change owner in writing.
Supply the agreed evidence
Provide the agreed EWS usage observation and read-only EwsEnabled/EwsAllowedAppIDs snapshot through the written transfer process.
Receive the decision record
Receive tenant-separated findings, unresolved evidence and review-only decisions with a dated manifest.
Fixed before evidence is accepted
The written scope fixes the delivery date and retention window after the complete evidence set passes intake. Unsupported or ambiguous input is re-scoped or declined before processing.
The same bounded review across a portfolio of up to five tenants, with one portfolio summary and tenant-separated records.
One supplied usage export and one read-only configuration snapshot, reconciled into a dated tenant decision record.
Three founding engagements
The first three qualified one-tenant founding engagements are EUR 350 net and include a request for short asynchronous written feedback after delivery.
The founding rate is confirmed in writing while a founding slot remains; the standard one-tenant price applies otherwise.
Any case-study permission is optional, requested separately after delivery and has no effect on the founding price or service.
If a separately scoped Standard or Complex full audit is ordered within 60 days, the paid Review fee may be credited against that larger engagement. Portfolios above five tenants are scoped individually. Prices are net; any applicable tax is stated on the written order.
The evidence boundary is agreed before processing
Work starts only after the complete evidence set passes intake and a delivery date is confirmed in writing; unsupported or ambiguous input is re-scoped or declined before processing.