Security News > 2023 > April > Microsoft delays Exchange Online CARs deprecation until 2024
Microsoft announced today that Client Access Rules deprecation in Exchange Online will be delayed by one year until September 2024.
Microsoft 365 administrators can utilize CARs comprising priority values, exceptions, actions, and conditions to filter client access to Exchange Online using various factors.
In essence, once configured, they help control access to Exchange Online resources within an organization.
In a previous announcement from September 2022, the company said the old Exchange Online access rules would be phased out until September 2023.
Until the final retirement deadline is reached next year, Microsoft is waiting for customers to request help migrating their CARs to the new access control options via support tickets.
As Redmond explained in September 2022, switching from old Exchange Online access rules to conditional access would add extra resiliency by ensuring tenant policy change enforcement in almost real-time and proactively terminating active user sessions.