Security News > 2023 > April > Microsoft delays Exchange Online CARs deprecation until 2024

Microsoft announced today that Client Access Rules deprecation in Exchange Online will be delayed by one year until September 2024.
Microsoft 365 administrators can utilize CARs comprising priority values, exceptions, actions, and conditions to filter client access to Exchange Online using various factors.
In essence, once configured, they help control access to Exchange Online resources within an organization.
In a previous announcement from September 2022, the company said the old Exchange Online access rules would be phased out until September 2023.
Until the final retirement deadline is reached next year, Microsoft is waiting for customers to request help migrating their CARs to the new access control options via support tickets.
As Redmond explained in September 2022, switching from old Exchange Online access rules to conditional access would add extra resiliency by ensuring tenant policy change enforcement in almost real-time and proactively terminating active user sessions.
News URL
Related news
- Microsoft Exchange Online outage affects Outlook web users (source)
- Microsoft: Exchange Online bug mistakenly quarantines user emails (source)
- Microsoft's End of Support for Exchange 2016 and 2019: What IT Teams Must Do Now (source)
- Week-long Exchange Online outage causes email failures, delays (source)