Blog/ Email glossary & concepts

What Is EWS? Exchange Web Services and Its Retirement

Nafiul HasanNafiul Hasan· 7 min read
Diagram explaining what Exchange Web Services (EWS) is: a SOAP/XML API connecting applications to Exchange Online mailboxes, being retired in favour of Microsoft Graph.

The short answer

Exchange Web Services (EWS) is a SOAP/XML API that Microsoft introduced with Exchange Server 2007 so applications could read and manage mailbox data — mail, calendar and contacts. Microsoft is retiring EWS in Exchange Online: it begins to be disabled in October 2026 and is fully off by April 2027. The replacement is Microsoft Graph.

What Exchange Web Services (EWS) is, how the SOAP API works, Microsoft's EWS retirement timeline in Exchange Online, and what replaces it.

On this page
  1. 01What is Exchange Web Services (EWS)?
  2. 02How does EWS work?
  3. 03Is EWS being deprecated, and when does it stop working?
  4. 04What breaks when EWS is switched off
  5. 05EWS vs Microsoft Graph: what replaces it
  6. 06Common misconceptions about EWS retirement
  7. 07Where AI Emaily fits

Exchange Web Services (EWS) is one of the oldest ways an application can talk to a Microsoft mailbox, and it is on its way out. If you landed here because an integration warned you about EWS, or because Microsoft's admin center keeps nudging you, the short version is this: EWS still works today, but Microsoft is switching it off in Exchange Online on a published, phased schedule.

This page explains what EWS is, how it works, when it stops working, and what to use instead.

What is Exchange Web Services (EWS)?#

Exchange Web Services (EWS) is a SOAP-based API that Microsoft introduced with Exchange Server 2007. It lets a program read and change the contents of a mailbox — messages, calendar events, contacts, tasks and folders — without going through the Outlook interface a person would use.

It is a server-side API, not a mail app. A backup tool, a CRM, a room-booking system or a signature manager uses EWS to reach many mailboxes at once. That is different from a protocol such as IMAP, which a single person's mail client uses to fetch their own mail.

How does EWS work?#

An EWS client sends a request as a SOAP envelope — an XML document — over HTTPS to a single endpoint on the Exchange server, and the server replies with XML. Most developers use the EWS Managed API, a .NET library that wraps the raw SOAP calls, though you can also call the service directly.

Clients rarely hard-code the address. They use Autodiscover, a Microsoft service that returns the correct EWS endpoint for a given mailbox. Authentication once relied on Basic auth or NTLM; in Exchange Online, Basic auth for EWS has been retired, so an app now signs in with OAuth 2.0.

One feature made EWS especially popular for service apps: impersonation. EWS impersonation lets a service account, granted the right role, act as though it were another user. One application can then reach thousands of mailboxes without holding each person's password. Backup, archiving, migration and CRM tools leaned on this heavily. That broad reach is also part of why Microsoft is tightening EWS — per Microsoft's documentation, the January 2024 Midnight Blizzard security incident involved EWS and raised the urgency of retiring it.

A typical EWS setup
Endpoint (Exchange Online)https://outlook.office365.com/EWS/Exchange.asmx
TransportSOAP (XML) over HTTPS
DiscoveryAutodiscover locates the endpoint for a mailbox
Auth (now)OAuth 2.0 — Basic auth is retired in Exchange Online

Is EWS being deprecated, and when does it stop working?#

Yes. Microsoft announced in 2018 that EWS would receive no new features, and in 2023 it set a date to switch EWS off in Exchange Online. As of August 2026, Microsoft's own documentation describes a phased shutdown rather than a single cut-off — and the exact timing can vary by tenant, so check the source page, because this timeline has moved before.

DateWhat Microsoft says happens
July 2018Microsoft announces EWS will get no further feature updates; Microsoft Graph becomes the path forward.
2023Microsoft sets the Exchange Online disablement date for October 2026.
January 2024The Midnight Blizzard security incident involves EWS and raises the urgency; the effort widens to include Microsoft's own apps.
October 2026EWS starts to be disabled globally for all Exchange Online organizations, in a phased rollout admins can influence.
April 2027EWS is fully disabled in Exchange Online.

This is Exchange Online only

The retirement applies to Exchange Online. EWS on Exchange Server running on your own hardware is not affected by this change — it keeps working.

What breaks when EWS is switched off#

When EWS is disabled, any app that still calls it against an Exchange Online mailbox stops working. That includes older mail clients, backup and e-discovery tools, migration utilities, room and resource booking systems, CRM sync, email signature managers and in-house scripts.

The fix is to move those apps to Microsoft Graph. Microsoft publishes EWS usage reports in the Microsoft 365 admin center and an EWS analyzer tool to help you find what still depends on EWS before the deadline. End users do not need to do anything — Microsoft is also removing EWS from its own products, such as Outlook, Office and Teams.

EWS vs Microsoft Graph: what replaces it#

Microsoft Graph is the replacement. It is a single REST API for Microsoft 365 — not just mail, but calendars, contacts, Teams, files, users and more — using JSON instead of XML. Microsoft says Graph has near-complete parity with EWS for most scenarios, but as of 2026 a few gaps remain, such as mailbox import and export and some public-folder access.

DimensionExchange Web Services (EWS)Microsoft Graph
FormatSOAP requests and responses in XMLREST requests, JSON responses
EndpointOne Exchange endpoint, e.g. /EWS/Exchange.asmxgraph.microsoft.com, one API across Microsoft 365
AuthenticationBasic and NTLM historically; OAuth 2.0 required in Exchange OnlineOAuth 2.0 with Microsoft Entra ID only
ScopeExchange mailbox data — mail, calendar, contacts, tasksMail plus Teams, OneDrive, users, groups and more
Change notificationsPush, pull and streaming notificationsWebhooks (change notifications) and delta queries
Status in Exchange OnlineDeprecated; disablement Oct 2026 to Apr 2027Actively developed; Microsoft's recommended API
On-premises Exchange ServerStill supportedLimited; Graph is cloud-first

Common misconceptions about EWS retirement#

  • Myth: EWS is disappearing everywhere. Reality: the retirement is for Exchange Online only. Exchange Server on-premises keeps EWS.
  • Myth: EWS stops on a single day. Reality: it is phased — disablement starts October 2026 and completes by April 2027, and admins can turn it off sooner or gate it with an app allow-list.
  • Myth: as an Outlook user I need to migrate something. Reality: the retirement targets apps and integrations that call EWS, not people reading mail in Outlook.
  • Myth: Microsoft Graph is just EWS with JSON. Reality: it is a different model with broader scope, and as of 2026 it is near-parity but not identical.
  • Myth: EWS is the same as MAPI, ActiveSync or IMAP. Reality: those are separate protocols; EWS is a SOAP web-service API for programmatic mailbox access.
A bridge diagram showing applications moving from the retiring EWS SOAP/XML API on one side to the Microsoft Graph REST/JSON API on the other, within Exchange Online.
EWS to Microsoft Graph is the migration path Microsoft recommends for Exchange Online.

Where AI Emaily fits#

You might be reading this because an app you rely on is about to lose EWS access, so it is worth being clear about what a mail client can and cannot do for that. AI Emaily is a mail client — an AI chief of staff that helps triage your inbox and draft replies — not an EWS integration and not a migration tool. It connects to your Outlook or Microsoft 365 mailbox through Microsoft's modern OAuth sign-in, the Graph-based connection Microsoft now recommends, rather than the EWS endpoint being switched off, so the retirement does not change how you add an account.

What it does not do is move a custom in-house app or a third-party tool off EWS; for that you need Microsoft's EWS-to-Graph mapping and analyzer tools, and usually a developer. We build AI Emaily. If you want the mail that reaches your Microsoft 365 inbox triaged and drafted for you, that is the job we do.

Frequently asked

Nafiul Hasan

Written by

Nafiul Hasan

Nafiul Hasan is an entrepreneur and AI automation system builder with 10+ years of experience turning messy, manual workflows into reliable automated systems. He designs and ships AI enterprise solutions end-to-end — the agent logic, the data plumbing, and the product people actually use — and founded AI Emaily to give busy professionals their attention back. He writes here from the builder's seat: what works, what breaks, and how to put AI to work without giving up control.

EntrepreneurAI Automation System BuilderAI EnthusiastBuilds AI Enterprise Solutions10+ years experience
More from Nafiul
Ready when you are

Let AI Emaily run your Microsoft 365 inbox

Connect Outlook or Microsoft 365 and let the agent triage, draft and follow up — with your approval before anything sends.

  • 7-day free trial
  • Cancel anytime
  • Every provider