Microsoft has decided to postpone the abolition of Client Access Rules (CARs) for Exchange Online until September 2024, giving companies more time to properly arrange their migration in certain scenarios.
Administrators of Microsoft 365 environments use Client Access Rules (CARs) to establish priority values, exceptions, actions, and conditions for client access to Exchange Online. It was announced in September 2022 that the CARs would be abolished a year later, as Microsoft wants users to use more secure access methods such as Azure Active Directory (AAD) Conditional Access (CA) and Continuous Access Evaluation (CAE). These methods should bring more resilience by ensuring tenant policy change enforcement in near real-time, as well as proactively stopping user sessions.
However, Microsoft has now discovered that enterprises cannot migrate CARs to AAD CA and CAE in all scenarios, and need more time and support, especially for planning and testing. As a result, the tech giant has decided to extend the migration period by one year, until September 2024. Customers who need an extension must submit a support ticket to Microsoft.
