Microsoft 365 Is About to Disable Outdated File Access

This guide provides a clear, practical overview of "Microsoft 365 Is About to Disable Outdated File Access". It organizes the most useful details, explains important considerations, and highlights the steps or choices that matter most.

According to the official information posted on Microsoft 365 Admin Center. Starting in mid-July 2025, the company will disable legacy authentication protocols used to access files on Microsoft 365, Office applications, SharePoint, and OneDrive.

Specifically, applications or services that use Relying Party Suite (RPS) or FrontPage Remote Procedure Call (FPRPC) to perform browser authentication to open Office files will no longer be able to do so. As expected, this move is mainly to improve the security of Microsoft services.

Microsoft says RPS is vulnerable to brute-force and phishing attacks due to its age. Similarly, FPRPC (used for remote web page editing) is vulnerable to multiple vulnerabilities. As a result, both protocols will be disabled by default starting in mid-July 2025, with the implementation expected to be completed by August 2025.

The Redmond tech giant will update the default protocol standard without requiring customers to change any licensing terms. Additionally, after the changes are rolled out, Microsoft 365 will require admin consent to allow third-party access to files and sites. System administrators can view instructions here to configure admin consent workflows.

Microsoft says these changes are in line with the principles of the Secure Future Initiative (SFI). Earlier in the day, they also announced the rollout of enhanced security defaults for Windows 365 for the same reason.