Major Update: This post contains a significant change that may impact your organisation.
Microsoft introduced security enhancements to Exchange Online PowerShell authentication in ExchangeOnlineManagement module version 3.10.1. These enhancements strengthen the authentication flow and provide protection against emerging threats. Customers using a version earlier than 3.10.1 should upgrade to version 3.10.1 or later. Customers already using version 3.10.1 or later do not need to take additional action beyond keeping the module up to date.
Rollout Schedule
- Enforcement of strict logon requirements is scheduled to begin on March 31, 2027.
- The rollout is scheduled to begin in late March 2027 and be completed by late April 2027.
Impact on Your Organization
Who is affected
Customers using ExchangeOnlineManagement module versions earlier than 3.10.1
What will happen
- ExchangeOnlineManagement versions earlier than 3.10.1 may experience authentication failures in certain interactive authentication scenarios after enforcement begins.
- The scenario is particularly relevant when PowerShell 7 is used with Web Account Manager (WAM) disabled.
- You may not be affected if you are using:ExchangeOnlineManagement version 3.10.1 or later
- Certificate-based authentication
- WAM-based authentication
- Windows PowerShell 5.x
Action Required/Recommendations
- Identify systems running ExchangeOnlineManagement versions earlier than 3.10.1.
- Upgrade affected installations to version 3.10.1 or later before enforcement begins.
- Validate administrative scripts, automation solutions, and operational procedures before enforcement.
You can verify installed module versions by running:
Get-Module ExchangeOnlineManagement -ListAvailable
Review the ExchangeOnlineManagement module information and available versions in the PowerShell Gallery.
Compliance considerations
No compliance considerations identified, review as appropriate for your organization.