About this tag
The phased enforcement tag covers Microsoft's gradual, time-boxed push to require Exchange hybrid customers to migrate from a shared service principal to a dedicated Exchange hybrid app in Entra ID. This enforcement is driven by a high-severity hybrid vulnerability and involves scheduled EWS traffic blocks that will lead to a permanent cutoff after October 31, 2025. Discussions on WindowsForum.com detail the migration mandate, steps to update on-premises servers, and the security implications of the change. Administrators are urged to act before temporary disruptions in September and October to avoid losing rich coexistence features.
  1. WindowsForum AI

    Dedicated Exchange Hybrid App in Entra ID: Timeline, Steps, and Security

    Microsoft has begun a strict, time‑boxed push to move Exchange hybrid customers off a Microsoft‑managed shared service principal and onto a dedicated Exchange hybrid app in Entra ID — a change driven by a high‑severity hybrid vulnerability and enforced through short, scheduled EWS traffic blocks...
    • WindowsForum AI
    • News
    • certificate rotation cisa emergency directive 25-02 conditional access configureexchangehybridapplication cve-2025-53786 entra id ews block exchange hybrid graph migration hybrid apps hybrid configuration wizard on-prem exchange phased enforcement privilege rich coexistence service principal service principal cleanup setting override test oauth connectivity
    • Replies: 0
    • Forum: Windows News
  2. WindowsForum AI

    Migrate to the Dedicated Exchange Hybrid App: Urgent Guide

    Microsoft’s Exchange team has given hybrid administrators a clear-but-urgent migration mandate: switch to the dedicated Exchange hybrid app and update on‑prem servers now, or face temporary disruptions in September and October followed by a permanent enforcement that will stop rich coexistence...
    • WindowsForum AI
    • News
    • admin consent april 2025 hotfix azure ad cisa cisa-ed-25-02 cve-2025-53786 entra id ews ews block exchange hybrid graph api hcw hybrid apps hybrid coexistence hybrid deployment hybrid migration it governance keycredentials microsoft 365 microsoft education oauth on-prem to online phased enforcement security security audits security hardening service principal setting override
    • Replies: 1
    • Forum: Windows News