Skip to main content
Sticky

🚀 Proactive Advisory Update: Transition from Exchange Web Services (EWS) to Microsoft Graph API

  • October 30, 2025
  • 10 replies
  • 1219 views

Arvind
Vaulter
Forum|alt.badge.img+7

Updated advisory as of April 10, 2026. We will continue to provide new updates as we see further developments and updates from Microsoft around their transition. - Commvault Support & Community team


At Commvault, we are committed to ensuring your data remains resilient and your transitions remain seamless. We are closely monitoring Microsoft’s retirement of Exchange Web Services (EWS) in Exchange Online and are already engineering the path forward for your backup environment.


What is Changing?

Microsoft is transitioning from the 20-year-old EWS architecture to the modern, REST-based Microsoft Graph API. This shift enhances security via OAuth-based authentication and provides a more unified architecture across Microsoft 365.


The Timeline

Per Microsoft, this is the planned transition timeline for EWS:

  • June 30, 2026: EWS access blocked for F1, F3, and Kiosk licenses.
  • October 1, 2026: Phased disablement of EWS begins (tenant-controlled).
  • April 1, 2027: EWS permanently retired for all Exchange Online tenants.

⚠️ IMPORTANT: This change applies only to Exchange Online. On-premises Exchange Server environments are not impacted by this deprecation.

 

Commvault Milestone Details 

We understand that your backup continuity is non-negotiable. Commvault is developing a robust, Graph API-based Exchange backup solution designed to bridge existing API gaps while maintaining the high standards of recovery you expect.

Planned Availability: Summer 2026 Target Release 11.44 LTS deployment models supported for both SaaS (Metallic) and Software. Our timeline ensures your environment is "Graph-ready" well before Microsoft begins the phased disablement in October 2026. 


Dependency on the Microsoft Ecosystem

As a Microsoft partner, Commvault’s development timeline is inextricably linked to Microsoft’s API release schedule. While Graph is the future, Microsoft has acknowledged that it does not yet have full feature parity with EWS.

 

What this means for you:

  • Shared Timelines: Our delivery of 11.44 LTS depends on Microsoft releasing stable, production-ready versions of the necessary Graph endpoints.
  • Gap Closure: We are working directly with Microsoft to ensure they address "feature gaps" (such as Archive Mailboxes, Public Folders, and advanced metadata) so that your backup fidelity is not compromised.
  • Proactive Adaptation: If Microsoft shifts their roadmap or delays critical API features, Commvault will adjust our engineering efforts to keep your data protected using the most secure methods available.
     

Recommended Actions for Administrators

While the transition is still a ways off, there are two key areas to keep on your radar:

  1. Licensing Audit: Users on F1, F3, or Kiosk licenses will lose EWS access by June 2026. If these users require backup via EWS until our Summer 2026 release, consider temporary license upgrades (Plan 1/2 or E3/E5).
  2. Permissions Prep: Moving to Graph will require reauthorizing Azure AD applications and granting new OAuth scopes. We will provide detailed "how-to" documentation closer to the 11.44 LTS release.

 

Stay Tuned

We will continue to share updates, timelines, and guidance here and through our KB

For full Microsoft guidance, take a look at this blog post from their Exchange team and this Microsoft Learn article.  

As always, don’t hesitate to post questions here or reach out to your account team.

10 replies

dude
Community All Star
Forum|alt.badge.img+20
  • Community All Star
  • October 30, 2025

@Arvind  thanks for sharing that with us.

 

We currently still have Exchange On-Prem Backups. Do you know if this change to MS Graph API will change in any way the overall infrastructure needed to maintain Backups from Exchange (Access Nodes, WebServer, Index Servers etc) or that will remain the same? Just looking for some additional details.

https://documentation.commvault.com/2024e/commcell-console/exchange_mailbox_agent_architecture_user_mailbox_and_journal_mailbox.html

 

Thank you


Arvind
Vaulter
Forum|alt.badge.img+7
  • Author
  • Vaulter
  • October 30, 2025

Hey ​@dude — love the name, by the way 😉
 

Short answer: There are no changes to your Commvault infrastructure.
 

The move from EWS to Microsoft Graph only changes how Exchange data is accessed, not your overall architecture.

Your existing components — Access Nodes, Web Server, Index Server(s), and Media Agents — remain the same.

This is purely an API transition, where we’ll use Microsoft Graph instead of EWS for Exchange Online operations.

Just make sure you’re running the latest Commvault Feature or Maintenance Release [As it's released], which includes the new Graph API integration.


DGarra
Vaulter
Forum|alt.badge.img+3
  • Vaulter
  • November 10, 2025

@dude 

This affects EWS for Exchange Online only. Microsoft has not made any announcements for the deprecation of EWS for on-premises deployments. 

https://support.commvault.com/Article/Details/89439

As there is no Graph API available to On-premises deployments through all versions as of 2025, I wouldn't expect a change to be made there. 


  • Novice
  • February 12, 2026

We have Commvault and Exchange Online backup (all O365 backup actually), how can I determine if i’m using any EWS connection within my current setup? I tried to look into the documentations, but it was not very clear for me, sorry about If missed something. Could someone help to understand that? thanks in advance.


Damian Andre
Vaulter
Forum|alt.badge.img+27
  • Vaulter
  • February 19, 2026

We have Commvault and Exchange Online backup (all O365 backup actually), how can I determine if i’m using any EWS connection within my current setup? I tried to look into the documentations, but it was not very clear for me, sorry about If missed something. Could someone help to understand that? thanks in advance.

For exchange your are using EWS as graph support has not been implemented yet. Per the original post it’s on target for US summer 2026 -- most likely around June timeframe.


  • Novice
  • February 24, 2026

So if i understand correctly, regardless of if it’s SaaS-Metallic o365 or on-prem exchange, there is no manual intervention required from the administrators, as long as the (planned) summer release installed by the time October 2026 comes?


Damian Andre
Vaulter
Forum|alt.badge.img+27
  • Vaulter
  • February 25, 2026

So if i understand correctly, regardless of if it’s SaaS-Metallic o365 or on-prem exchange, there is no manual intervention required from the administrators, as long as the (planned) summer release installed by the time October 2026 comes?

Since the change over to the new API is in development, there isn't any clarity yet if there are additional instructions beyond just installing the updates. Hopefully we will get more info in the coming months.


DGarra
Vaulter
Forum|alt.badge.img+3
  • Vaulter
  • March 13, 2026

All, 

Guidance will be posted to this article (or linked from it) when a full perspective is available, and the transition is underway. 

https://support.commvault.com/Article/Details/89439

 


Jennifer Kelley
Vaulter
Forum|alt.badge.img+20

Hi ​@DGarra thank you for the update! I’ll edit the original post to point to that new link.


DGarra
Vaulter
Forum|alt.badge.img+3
  • Vaulter
  • April 8, 2026

The old article has been superseded with this one: https://support.commvault.com/Article/Details/89729