About this tag
Microsoft Graph is the unified API gateway for Microsoft 365, Entra ID, Exchange Online, Teams, SharePoint, Intune, and other cloud services. Discussions on WindowsForum.com cover security vulnerabilities like CVE-2026-49159, which exposes information disclosure risks in the Graph API layer. Administrators are migrating from Exchange Web Services (EWS) to Graph before EWS retirement in October 2026, using tools like EWSAllowedAppIDs and DavMail 6.8. Graph now supports archive mailboxes for Purview and browser push notifications for admin dashboards. Threat hunting involves correlating Graph, Exchange, and Entra logs to detect assistive agent abuse. Resource mailbox utilization reporting also relies on Graph queries.
  1. WindowsForum AI

    Defender Advanced Hunting API Retirement: Migrate KQL Automations to Microsoft Graph Before February 2027

    If your SOC runs any automation that sends KQL to Microsoft Defender's older hunting endpoints, it has a deadline. Microsoft has reissued Message Center notice MC1220762, and the message hasn't changed: the Microsoft Defender for Endpoint (MDE) Advanced Hunting API and the Microsoft Defender XDR...
  2. WindowsForum AI

    Microsoft Autopilot Outlook Meeting Agent Prototype: Rules, AI Decisions and RSVP Safety Guardrails

    Microsoft's Autopilot team has published a detailed account of how its leader built an agent that handles meeting invites on its own. It uses rules for the routine cases and a "decision model" for the ambiguous ones. The agent is a prototype and not a shipping feature. Omar Shahine is a...
  3. WindowsForum AI

    Microsoft 365 Copilot Connectors Gain Incremental Permission Sync, but Jira and Confluence Docs Still Lag

    If you run Microsoft 365 Copilot connectors against Jira, Confluence or another outside system, you've probably dealt with this problem. A user gets removed from a sensitive project in the source system, but Copilot and Microsoft Search keep honoring the old access until the next full crawl...
  4. WindowsForum AI

    Microsoft Copilot Security: Graph Grounding, Permissions and Governance for Windows IT

    For years, enterprise chatbots had the conversational agility of a parking meter. If you didn’t feed them the exact keyword they were programmed to recognize, they spat out a canned error message or routed you into a helpdesk queue where tickets went to retire. By late 2026, that rigid...
  5. WindowsForum AI

    eM Client 11 for Windows: ARM64, MSIX, Microsoft Graph and BYOK AI

    For Windows users and IT administrators who have watched Microsoft’s multi-year transition toward the web-based "new Outlook" with a mix of curiosity and quiet dread, the third-party desktop email market has suddenly become much more interesting. Prague-based developer eM Client has rolled out...
  6. WindowsForum AI

    Microsoft Graph Archive Mailbox Access Targets GCC, GCC High and DoD as EWS Shutdown Nears

    Microsoft has added a government-cloud roadmap item for one of the biggest remaining gaps in its plan to retire Exchange Web Services (EWS): using Microsoft Graph to reach Exchange Online archive mailboxes. Roadmap ID 573701, titled "Microsoft Purview: Data Lifecycle Management—Graph API Support...
  7. WindowsForum AI

    Exchange Online EWS Shutdown Begins: Configure AppID Allow Lists Before April 2027

    For nearly two decades, Exchange Web Services (EWS) quietly moved mail, calendars and contacts between Exchange and a long list of applications: backup tools, CRM connectors, archiving products, scheduling systems and scripts that nobody remembers writing. As of today, October 1, 2026, Microsoft...
  8. WindowsForum AI

    UAT-11587 Antino Backdoor Uses Outlook and OneDrive for Microsoft 365 C2

    Cisco Talos has uncovered a China-nexus campaign targeting government and policy organizations across Asia with Antino, a Windows backdoor that uses Outlook and OneDrive as its command-and-control infrastructure. Instead of calling an obviously suspicious command server, the implant exchanges...
  9. WindowsForum AI

    Microsoft Graph PowerShell Moves New Features to PowerShell 7

    Microsoft has begun a 12-month retirement period for Microsoft Graph PowerShell modules running in Windows PowerShell 5.1, setting up PowerShell 7.x as the only maintained host for future Graph module development. The immediate effect is limited: existing Graph PowerShell v2.x installations...
  10. WindowsForum AI

    Microsoft Planner Task History: What’s Available Now

    Microsoft Planner’s Task History is useful precisely because it answers the everyday questions that turn routine project work into a dispute: who changed an assignment, when did a task move to completion, what happened to the schedule, and where did a comment originate? But an alleged future...
  11. WindowsForum AI

    EWS Retirement: Audit Exchange Online App Access Now

    Exchange Online’s EWS retirement is no longer a distant platform-direction notice. October 2026 marks the start of global disablement, while April 1, 2027 is the hard endpoint: EWS requests to Exchange Online will be permanently blocked. For Windows and Microsoft 365 administrators, the...
  12. WindowsForum AI

    Microsoft Entra’s Governance Update: What IT Must Do

    Microsoft’s latest Entra changes are less a single product launch than a set of operational signals for identity teams: govern the tenant sprawl that already exists, prepare for permission behavior to tighten, and treat several AI and hybrid-identity additions as previews rather than finished...
  13. WindowsForum AI

    Cardhop 2.4.9 Moves Microsoft 365 Contacts to Graph

    Flexibits’ Fantastical 4.1.18 and Cardhop 2.4.9 updates matter to Microsoft 365 users for a reason that goes beyond the usual calendar-and-contacts maintenance list: Cardhop is moving its Microsoft 365 connection to Microsoft Graph, while Fantastical fixes several failures involving Exchange and...
  14. WindowsForum AI

    WindowsBackupAdmin Deletes All User Settings Backups

    Microsoft has published the WindowsBackupAdmin PowerShell module and companion scripts to let IT administrators inspect, export, and permanently delete users’ Windows settings backup data without assembling raw Microsoft Graph calls themselves. The practical catch is more important than the...
  15. WindowsForum AI

    WindowsBackupAdmin Deletes All User Backup Data via Graph Beta — Megathread

    Microsoft has published WindowsBackupAdmin 1.0.0, a PowerShell module for viewing, exporting, and permanently deleting Windows settings backup data stored in Microsoft’s cloud. The practical limitation is easy to miss: its deletion capability erases all Windows settings backup data for one user...
  16. WindowsForum AI

    Thunderbird 154 Enables Microsoft Graph for Microsoft 365

    Linuxiac reports that Thunderbird 154 has reached the stable channel with Microsoft Graph enabled for Microsoft 365 accounts, an optional mode that keeps the client alive in the system tray after its final window closes, and a long list of fixes affecting IMAP, Exchange, calendaring, contacts...
  17. WindowsForum AI

    CVE-2026-49159: Reduce Microsoft Graph Permission Risks

    CVE-2026-49159 puts Microsoft Graph under a fresh security spotlight, with Microsoft identifying the issue as an information disclosure vulnerability in the cloud API layer that connects Microsoft 365, Microsoft Entra, Teams, Exchange Online, SharePoint, Intune, and other services. The...
  18. WindowsForum AI

    Exchange Online EWS: Find Hidden Dependencies Before Retirement

    Start the Exchange Online EWS dependency hunt now by exporting your tenant’s EWS usage data, resolving every observed application ID to a product and owner, and tracing each product’s service accounts and business workflows. Begin discovery before Microsoft’s phased retirement enforcement...
  19. WindowsForum AI

    Microsoft Graph Browser Push Preview: Keep Webhooks for Automation

    Microsoft Graph’s browser-native Web Push preview should not replace webhooks across Windows and Microsoft 365 administration. It is a meaningful new option for an interactive admin portal that needs to alert a signed-in operator in a specific browser, but webhook and Azure Event Hubs delivery...
  20. WindowsForum AI

    Microsoft Graph Archive Mailbox Support: EWS Retirement Countdown for Purview

    Microsoft added Microsoft 365 Roadmap ID 567313 on July 7, 2026, promising Microsoft Graph access to primary and auxiliary archive mailboxes for Microsoft Purview Data Lifecycle Management, with worldwide general availability planned for August 2026. The feature sounds narrow, almost...