MC1483974: Action Required: Upgrade ExchangeOnlineManagement PowerShell Module to Version 3.10.1 or Later

Published . Last updated .

Microsoft 365 Message Center announcement MC1483974.

MS Message Center's Summary

Microsoft is strengthening Exchange Online PowerShell authentication security. Administrators must upgrade the ExchangeOnlineManagement module to version 3.10.1 or later before the end of March 2027 to prevent authentication failures, particularly when using PowerShell 7 with Web Account Manager disabled. We recommend auditing all automation scripts and local workstations to identify older module versions early.

Administrator impact
Administrators must update the ExchangeOnlineManagement PowerShell module on all affected management systems.
End user impact
No direct end user impact is expected.
Importance
7/10: Failure to upgrade the module will cause administrative script and authentication failures when enforcement begins.

Microsoft Summary

Upgrade the ExchangeOnlineManagement PowerShell module to version 3.10.1 or later by March 31, 2027, to avoid authentication failures due to new security enhancements. Identify and update older versions, especially if using PowerShell 7 with WAM disabled, and validate related scripts before enforcement.

Message Center ID
MC1483974
Category
plan For Change
Severity
normal
Services
Exchange Online
Tags
Admin impact
Expires
Action required by

What and Why

Microsoft introduced security enhancements to Exchange Online PowerShell authentication in ExchangeOnlineManagement module version 3.10.1. These enhancements strengthen the authentication flow and provide protection against emerging threats. Customers using a version earlier than 3.10.1 should upgrade to version 3.10.1 or later. Customers already using version 3.10.1 or later do not need to take additional action beyond keeping the module up to date.

Rollout Schedule

  • Enforcement of strict logon requirements is scheduled to begin on March 31, 2027.
  • The rollout is scheduled to begin in late March 2027 and be completed by late April 2027.

Impact on Your Organization

Who is affected:

Customers using ExchangeOnlineManagement module versions earlier than 3.10.1

What will happen:

  • ExchangeOnlineManagement versions earlier than 3.10.1 may experience authentication failures in certain interactive authentication scenarios after enforcement begins.
  • The scenario is particularly relevant when PowerShell 7 is used with Web Account Manager (WAM) disabled.
  • You may not be affected if you are using:
    • ExchangeOnlineManagement version 3.10.1 or later
    • Certificate-based authentication
    • WAM-based authentication
    • Windows PowerShell 5.x

Action Required/Recommendations

  1. Identify systems running ExchangeOnlineManagement versions earlier than 3.10.1.
  2. Upgrade affected installations to version 3.10.1 or later before enforcement begins.
  3. Validate administrative scripts, automation solutions, and operational procedures before enforcement.

You can verify installed module versions by running:

Get-Module ExchangeOnlineManagement -ListAvailable

Review the ExchangeOnlineManagement module information and available versions in the PowerShell Gallery.

Compliance considerations

No compliance considerations identified, review as appropriate for your organization.