Microsoft has decided to postpone the abolition of Client Access Rules (CARs) for Exchange Online until September 2024, giving companies more time to properly arrange their migration in certain scenarios.
Administrators of Microsoft 365 environments use Client Access Rules (CARs) to establish priority values, exceptions, actions, and conditions for client access to Exchange Online. In September 2022, it was announced that the CARs would be abolished a year later, with Microsoft wanting users to use more secure access methods such as Azure Active Directory (AAD) Conditional Access (CA) and Continuous Access Evaluation (CAE).
Conditional Access should bring more resilience by ensuring so-called tenant policy change enforcement in near real-time, as well as proactively stopping user sessions. However, Microsoft has now discovered that enterprises cannot migrate CARs to AAD CA and CAE in all scenarios, and require more time and support, especially for planning and testing.
As a result, the tech giant has decided to extend the migration period by one year, until September 2024. Customers who need an extension must submit a support ticket to Microsoft.
