Huntress and the EWS retirement
Microsoft Graph migration status from Huntress's own notices. Last checked 2026-10-25.
Huntress Managed ITDR
- Status
- Moved to Microsoft Graph
- Vendor notice
- https://support.huntress.io/hc/en-us/articles/19352044191635--Microsoft-365-Huntress-Identity-Isolation-for-ITDR-for-Microsoft-365
“Huntress uses the Microsoft Graph API to programmatically interact with a partner's Microsoft 365 environment.”
(Microsoft 365) Huntress Identity Isolation for ITDR for Microsoft 365, read 2026-10-25.
What to do. Huntress ITDR for Microsoft 365 acts through the Microsoft Graph API, for example to revoke sessions and delete malicious inbox rules. The page does not mention EWS.
One email from ewsappid.com each time a status on this page changes, nothing else, and none after 1 April 2027. Every alert has an unsubscribe link; one press deletes your address, or write to support@ewsappid.com at any time. Sender details are on the contact page; see the privacy policy.
Application IDs
This site lists no fixed application ID for Huntress. Look up an ID from your EWS usage report on the home page, or find the name behind it in Entra, under Enterprise applications.
Every app in your tenant
The tenant plan reads your EWS usage report in your browser and matches each app against these statuses and your current allow list. All vendor statuses.