Skip to content
MitoMito Docs

MT.1083: Ensure Delicensing Resiliency is enabled
ID MT.1083
Severity Low
Suite Mito
Product Exchange Online
Feature Mailboxes
Security area Infrastructure hardening
Resource type Tenant
User impact of fixing Low
Effort to fix Low
Reads from Exchange Online, Microsoft Graph

What this checks and how to fix it

Section titled “What this checks and how to fix it”

Important: This test is only available if your tenant has at least 5000 non-trial Exchange Online licenses.

Delicensing Resiliency SHOULD be enabled to maintain access to mailboxes when licenses are removed.

Remediation action

Section titled “Remediation action”

Enable Delicensing Resiliency by running the following PowerShell command in Exchange Online:

Terminal window
Set-OrganizationConfig -DelayedDelicensingEnabled:$true
Optional: Configure User Notifications
Section titled “Optional: Configure User Notifications”

You can also configure notifications to inform administrators and end users about delicensing events:

Terminal window
# Enable tenant admin notifications for delicensing events
Set-OrganizationConfig -TenantAdminNotificationForDelayedDelicensingEnabled:$true


# Enable end user mail notifications for delicensing events
Set-OrganizationConfig -EndUserMailNotificationForDelayedDelicensingEnabled:$true

Note: These notification settings help ensure stakeholders are informed when licensing changes occur that could affect mailbox access.

Section titled “Related links”

Mito check. Author: l-gosling. Open-source licences.

Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).

© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.