Microsoft is taking the first concrete step in its phased enforcement of the dedicated Exchange hybrid app requirement: on September 16, 2025 at 07:00 UTC Microsoft will temporarily block Exchange Web Services (EWS) traffic that uses the Exchange Online shared service principal for hybrid...
Microsoft’s Exchange team published a short but important Hotfix Update (HU) rollup for September 2025 that is aimed at fixing a non‑security issue in earlier updates and, crucially, preserves support for the dedicated Exchange hybrid application workflow introduced earlier in 2025 — the update...
cisa guidance
cu14
cu15
cve-2025-53786
dedicated hybrid app
entra id
ews
exchange hybrid
exchange server
exchange server 2016 cu23
graph permissions
health checker
hotfix update
hybridconfigurationwizard
migration to dedicated hybrid app
se rtm
september 2025
service principal
windows update
Microsoft has begun a strict, time‑boxed push to move Exchange hybrid customers off a Microsoft‑managed shared service principal and onto a dedicated Exchange hybrid app in Entra ID — a change driven by a high‑severity hybrid vulnerability and enforced through short, scheduled EWS traffic blocks...
Microsoft’s Exchange team has taken a decisive step toward finally letting organizations retire the last Exchange server in hybrid environments by adding cloud-managed remote mailbox support — a per-mailbox “flip-the-switch” that transfers Exchange attribute authority to Exchange Online while...