SMTP AUTH deprecation: scanning and printers
Published Feb 7, 2024
•
Updated May 1, 2026
Overview
Microsoft disables basic auth for SMTP AUTH broadly. Legacy scanners need modern alternatives.
Remediation plan
- Inventory devices with SMTP AUTH dependency; graph sign-in logs where possible.
- Prefer SMTP relay through Office 365 with IP allow lists or authenticated relay from service accounts with OAuth where supported.
- Replace devices unable to support secure patterns.
Timeline messaging
Give clients milestones; emergency exceptions are short-lived.
Validation
Send test pages after cutover; monitor DLQ and NDR themes weekly.
Related Articles
EDR deployment checklist for new workstations
## Overview Use this runbook when onboarding a new Windows workstation or re-imaging a device that...
security-endpoint-protection
msp
+1
Handling Defender for Business false positives
## Overview False positives waste analyst time and train users to ignore alerts. This article stand...
security-endpoint-protection
msp
+1
Application allowlisting with Windows Defender ASR rules
## Overview Attack Surface Reduction (ASR) rules reduce exploit surface by constraining Office macr...
security-endpoint-protection
msp
+1