EWS Allow-List Review
A fixed-scope written review for MSP portfolios and critical single tenants: supplied EWS usage evidence reconciled against the current EwsAllowedAppIDs snapshot and delivered as a dated decision record.
This is a scheduled written evidence review, not urgent incident response or a service that changes your Exchange configuration.
Microsoft's 26 October 2026 update describes the current Worldwide multi-tenant cloud rollout. Sovereign cloud timing is separate; do not apply the Worldwide cutoff to those clouds.
For EwsEnabled=true with a missing list, Microsoft reports that it populated EwsAllowedAppIDs on 10-11 October 2026. Administrators setting EwsEnabled=true after 11 October must populate the list themselves. For tenants already set to true, Microsoft says it will not change EWS availability until April 2027; this is not a guarantee that an application or its configuration works.
For EwsEnabled=null with a missing list, the disablement process has started. A 7-day Message Center warning precedes list population based on the previous 60 days of usage and the change to EwsEnabled=false. A tenant administrator may temporarily re-enable EWS subject to the App ID list; full retirement in April 2027 remains unchanged.
Microsoft says it will not overwrite or change a customer-managed list. That list remains authoritative for the tenant. A Microsoft-generated list may omit infrequent applications and retain applications the administrator does not want, so it is evidence to review rather than a business decision.
Read the source-backed state matrix and multi-tenant checklist in the MSP guide.
Sources checked 27 October 2026: EWS Deprecation Is Here — Exchange Team Blog (updated 26 October 2026, v11)· Exchange Online EWS application stopped working? — Exchange Team Blog (21 October 2026)
One written pass, with the unknowns left visible
The local-first review uses only supplied evidence. It does not connect to or test a live tenant.
Scope
Confirm the tenant count, available evidence, retention window and responsible change owner in writing.
Supply the agreed evidence
Provide the agreed EWS usage observation and read-only EwsEnabled/EwsAllowedAppIDs snapshot through the written transfer process.
Receive the decision record
Receive tenant-separated findings, unresolved evidence and review-only decisions with a dated manifest.
Fixed before evidence is accepted
The written scope fixes the delivery date and retention window after the complete evidence set passes intake. Unsupported or ambiguous input is re-scoped or declined before processing.
The same bounded review across a portfolio of up to five tenants, with one portfolio summary and tenant-separated records.
One supplied usage export and one read-only configuration snapshot, reconciled into a dated tenant decision record.
Three founding engagements
The first three qualified one-tenant founding engagements are EUR 350 net and include a request for short asynchronous written feedback after delivery.
The founding rate is confirmed in writing while a founding slot remains; the standard one-tenant price applies otherwise.
Any case-study permission is optional, requested separately after delivery and has no effect on the founding price or service.
If a separately scoped Standard or Complex full audit is ordered within 60 days, the paid Review fee may be credited against that larger engagement. Portfolios above five tenants are scoped individually. Prices are net; any applicable tax is stated on the written order.
The evidence boundary is agreed before processing
Work starts only after the complete evidence set passes intake and a delivery date is confirmed in writing; unsupported or ambiguous input is re-scoped or declined before processing.