# PSA ticket template: SMTP AUTH Basic Auth readiness (Action Pack #001)

Copy these fields into ConnectWise PSA, Autotask, HaloPSA, Syncro, or whatever PSA you use. Create one ticket per client tenant.

| Field | Value |
|---|---|
| **Summary / Title** | M365: SMTP AUTH Basic Auth readiness, [Client] (Microsoft change: end of Dec 2026) |
| **Board / Queue** | Projects or Proactive / Change Management |
| **Type / Subtype** | Proactive > Microsoft 365 > Exchange Online |
| **Priority** | Medium (raise to High if the script reports ACTION NEEDED) |
| **Due date** | [Your date, e.g. 2026-12-01]. Microsoft's date is "end of December 2026"; it has not published an exact day. |
| **Budget hours** | 0.5 h discovery per tenant + remediation as scoped |
| **Agreement / Billing** | [Per your agreement] |
| **Tags** | m365, exchange-online, smtp-auth, basic-auth, mspchangedesk-001 |

## Description (paste into the ticket body)

```
Microsoft change: SMTP AUTH Basic Authentication will be disabled by default for
existing Exchange Online tenants at the end of December 2026 (admins can re-enable).
A final removal date will be announced in the second half of 2027.
Source: https://techcommunity.microsoft.com/blog/exchange/updated-exchange-online-smtp-auth-basic-authentication-deprecation-timeline/4489835

Goal: find every device/app in this tenant that sends mail with SMTP AUTH + Basic auth,
and move it to a supported method before the change.
```

## Checklist

- [ ] **Discovery (read-only):** run `Get-SmtpAuthBasicReadiness.ps1` against the tenant. Attach `summary.txt` and the CSVs to this ticket.
- [ ] **Check usage report:** Exchange admin center > Reports > Mail flow > *SMTP AUTH Clients report*. Note senders whose Authentication Protocol shows **Basic Auth**.
- [ ] **Inventory:** for each account found, record the device/app, location, owner, and vendor.
- [ ] **Choose a path for each sender:**
  - [ ] Supports OAuth: switch it to OAuth SMTP AUTH.
  - [ ] Internal recipients only: High Volume Email (HVE) for Microsoft 365.
  - [ ] Internal + external, no OAuth support: Azure Communication Services Email, an SMTP relay connector (certificate or static IP; not usable from third-party hosted services such as Azure), or a third-party relay.
  - [ ] Can't be updated: firmware update or replace (quote the client).
- [ ] **Client communication:** send the client notice (template in pack) and get approval for any billable work.
- [ ] **Change window:** schedule changes; test that each device/app sends before closing.
- [ ] **Post-change check:** after the Microsoft change, confirm no new send failures (first business week of January 2027).
- [ ] **Document:** update the client's documentation (IT Glue / Hudu / etc.) with the new sending method per device.

## Resolution notes template

```
Senders found: [n]
Moved to OAuth: [list]
Moved to HVE / relay / other: [list]
Replaced / retired: [list]
Remaining exceptions (with reason + owner): [list or "none"]
Verified by: [tech] on [date]
```