MC1483974 - Action Required: Upgrade ExchangeOnlineManagement PowerShell Module to Version 3.10.1 or Later
Microsoft 365 Message Center announcement MC1483974.
MS Message Center's Summary
Microsoft is strengthening Exchange Online PowerShell authentication security. Administrators must upgrade the ExchangeOnlineManagement module to version 3.10.1 or later before the end of March 2027 to prevent authentication failures, particularly when using PowerShell 7 with Web Account Manager disabled. We recommend auditing all automation scripts and local workstations to identify older module versions early.
- Administrator impact
- Administrators must update the ExchangeOnlineManagement PowerShell module on all affected management systems.
- End user impact
- No direct end user impact is expected.
- Importance
- 7/10: Failure to upgrade the module will cause administrative script and authentication failures when enforcement begins.
Microsoft Summary
Upgrade the ExchangeOnlineManagement PowerShell module to version 3.10.1 or later by March 31, 2027, to avoid authentication failures due to new security enhancements. Identify and update older versions, especially if using PowerShell 7 with WAM disabled, and validate related scripts before enforcement.
- Message Center ID
- MC1483974
- Category
- plan For Change
- Severity
- normal
- Services
- Exchange Online
- Tags
- Admin impact
- Published
- 2026-09-30
- Last updated
- 2026-09-30
- Expires
- 2027-06-30
- Action required by
- 2027-03-26
[What and Why:] Microsoft introduced security enhancements to Exchange Online PowerShell authentication in ExchangeOnlineManagement module version 3.10.1. These enhancements strengthen the authentication flow and provide protection against emerging threats. Customers using a version earlier than 3.10.1 should upgrade to version 3.10.1 or later. Customers already using version 3.10.1 or later do not need to take additional action beyond keeping the module up to date. [Rollout Schedule:] Enforcement of strict logon requirements is scheduled to begin on March 31, 2027. The rollout is scheduled to begin in late March 2027 and be completed by late April 2027. [Impact on Your Organization:] Who is affected: Customers using ExchangeOnlineManagement module versions earlier than 3.10.1 What will happen: ExchangeOnlineManagement versions earlier than 3.10.1 may experience authentication failures in certain interactive authentication scenarios after enforcement begins. The scenario is particularly relevant when PowerShell 7 is used with Web Account Manager (WAM) disabled. You may not be affected if you are using: ExchangeOnlineManagement version 3.10.1 or later Certificate-based authentication WAM-based authentication Windows PowerShell 5.x [Action Required/Recommendations:] Identify systems running ExchangeOnlineManagement versions earlier than 3.10.1. Upgrade affected installations to version 3.10.1 or later before enforcement begins. Validate administrative scripts, automation solutions, and operational procedures before enforcement. You can verify installed module versions by running: Get-Module ExchangeOnlineManagement -ListAvailable Review the ExchangeOnlineManagement module information and available versions in the PowerShell Gallery. [Compliance considerations:] No compliance considerations identified, review as appropriate for your organization.