A robust email, calendaring, and collaboration platform developed by Microsoft, designed for enterprise-level communication and data management.Miscellaneous topics that do not fit into specific categories.
Hi jadav Suresh,
Thank you for posting your question in the Microsoft Q&A forum.
Based on your description (“hosted URL” + “basic credentials” to connect to a customer inbox), could you please confirm whether the hosted URL you’re using is an EWS endpoint (for example, a URL ending with /EWS/Exchange.asmx)? This is important because the required code and configuration changes depend heavily on the protocol and authentication method you’re using.
Given that Exchange Server 2010 is out of support, you mentioned you are considering either moving to a newer on‑premises version or moving to Exchange Online (cloud hosted). From a “code change” perspective, there are two common scenarios:
- If you choose to migrate to Exchange Server 2019 (on‑premises), please note that Exchange Server 2019 has reached end of support on October 14, 2025, so the longer-term on‑premises direction is now Exchange Server Subscription Edition (Exchange SE) rather than starting new on 2019. In addition, there is no direct migration path from Exchange 2010 to Exchange 2019. The commonly referenced guidance is a “double hop” approach (2010 > 2016 > 2019). If you are currently on Exchange 2010 SP2, there is also a prerequisite in this readiness checks before you can introduce Exchange 2016 into the organization: all Exchange 2010 servers must be upgraded to Exchange 2010 SP3 + RU11 (or later) for coexistence with Exchange 2016.
For your application, if it is truly using EWS with Basic authentication against on‑premises Exchange, then in many environments EWS and Basic authentication can still exist on-premises, so you may not need immediate code changes purely for credentials (subject to your customer’s security policy). Your main work in this scenario is likely to be endpoint/namespace updates, certificate/TLS considerations, and validating authentication settings as you move to the new servers. For deployment and upgrade considerations, you can check these references: - If you choose the more future-facing option and migrate to Exchange Online (cloud hosted), then Basic authentication is now disabled in all tenants and cannot be re-enabled. This impacts EWS, Autodiscover, POP/IMAP, and other protocols that previously allowed Basic auth. In this case, you should expect code changes at the authentication layer at minimum. Microsoft also recommends that applications accessing Exchange Online via legacy EWS move toward Microsoft Graph (modern OAuth-based access, more granular permissions). For the tenant/mailbox migration planning itself (separate from the app code), these Exchange Online admin references can help you choose the best migration approach and execute it:
I hope these references help you. If you have any further questions, please feel free to share.
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.