On October 14, 2025, support for Exchange Server 2016 and Exchange Server 2019 ends — one month from now — and organizations that delay face escalating operational risk, loss of security updates, and an increasingly narrow set of safe upgrade paths. Microsoft’s Exchange engineering team has...
april 2025 hotfix
cloud migration
dedicatedhybridapp
entra id
esu 2025
ews enforcement
exchange 2016
exchange 2019
exchange end of support
exchange online migration
exchange server se
exchange-server-2016
exchange-server-2019
health checker
hybridapp
it risk management
lifecycle policy
migration planning
on-premises modernization
security updates
Microsoft is taking the first concrete step in its phased enforcement of the dedicated Exchange hybrid app requirement: on September 16, 2025 at 07:00 UTC Microsoft will temporarily block Exchange Web Services (EWS) traffic that uses the Exchange Online shared service principal for hybrid...
Microsoft’s Exchange team published a short but important Hotfix Update (HU) rollup for September 2025 that is aimed at fixing a non‑security issue in earlier updates and, crucially, preserves support for the dedicated Exchange hybrid application workflow introduced earlier in 2025 — the update...
cisa guidance
cu14
cu15
cve-2025-53786
dedicatedhybridapp
entra id
ews
exchange hybrid
exchange server
exchange server 2016 cu23
graph permissions
health checker
hotfix update
hybrid configuration wizard
migration to dedicatedhybridapp
se rtm
september 2025
service principal
windows update
Microsoft has begun a strict, time‑boxed push to move Exchange hybrid customers off a Microsoft‑managed shared service principal and onto a dedicated Exchange hybrid app in Entra ID — a change driven by a high‑severity hybrid vulnerability and enforced through short, scheduled EWS traffic blocks...
Microsoft’s Exchange team has taken a decisive step toward finally letting organizations retire the last Exchange server in hybrid environments by adding cloud-managed remote mailbox support — a per-mailbox “flip-the-switch” that transfers Exchange attribute authority to Exchange Online while...
Microsoft's updated Exchange hybrid guidance — and a last‑minute change to the enforcement cadence — should be on every hybrid admin’s radar: the Exchange team has expanded the push to migrate hybrid traffic away from the long‑standing Exchange Online shared service principal into a tenant‑owned...
april 2025 hotfix
azure ad
cisa guidance
cve-2025-53786
dedicatedhybridapp
entra id
ews block
exchange hybrid
graph api
hcw
hybrid coexistence
hybrid migration
it governance
microsoft learn
oauth
phased enforcement
security auditing
security hardening
service principal
Microsoft’s Exchange team has given hybrid administrators a clear-but-urgent migration mandate: switch to the dedicated Exchange hybrid app and update on‑prem servers now, or face temporary disruptions in September and October followed by a permanent enforcement that will stop rich coexistence...