Skip to content

ConfigureFipFsTextExtractionOverrides

Download the latest release: ConfigureFipFsTextExtractionOverrides.ps1

Note

Starting in the Exchange Server March 2024 security update we disable the use of the Oracle Outside In Technology (also known as OutsideInModule or OIT) in Microsoft Exchange Server due to multiple security vulnerabilities in the module. The OutsideInModule was used by the Microsoft Forefront Filtering Module to extract information from different file types, to perform content inspection as part of the Exchange Server Data Loss Prevention (DLP) or Exchange Transport Rules (ETR) features.

The ConfigureFipFsTextExtractionOverrides.ps1 script can be used to manipulate the usage of OutsideInModule that is disabled by default in the Exchange Server March 2024 security update.

There are two scenarios in which the script could be used:

  • It can be used to explicitly enable file types that should be processed by the help of the OutsideInModule.
  • It can be used to override the version of the OutsideInModule that should be used for processing file types, which were explicitly enabled to be processed by the OutsideInModule. After installing the March 2024 security update, Exchange Server uses the latest version of the OutsideInModule version 8.5.7 by default. By activating this override, OutsideInModule version 8.5.3 will be used.

Details about the change that was done as part of the March 2024 security update can be found in KB5037191.

Details about the security vulnerability can be found in the MSRC security advisory.

Warning

Microsoft strongly recommends not overriding the default behavior that was introduced with the March 2024 security update if there are no functional issues that affect your organization's mail flow.

Requirements

This script must be run as Administrator in Exchange Management Shell (EMS). The user must be a member of the Organization Management role group.

How To Run

Examples:

This syntax enables processing of Jpeg and AutoCad file types by the help of the OutsideInModule on the server where the command was executed.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ConfigureOverride "Jpeg", "AutoCad" -Action "Allow"

This syntax disables processing of Jpeg and AutoCad file types by the help of the OutsideInModule on the server ExchangeSrv01 and ExchangeSrv02.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ExchangeServerNames ExchangeSrv01, ExchangeSrv02 -ConfigureOverride "Jpeg", "AutoCad" -Action "Block"

This syntax causes Exchange Server to use the previous version of the OutsideInModule. The override will be enabled on the system on which the script was executed. Note that this can make your system vulnerable to known vulnerabilities in the previous version and should not be used unless explicitly advised by Microsoft.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ConfigureOverride "OutsideInModule" -Action "Allow"

This syntax disables the override of the version of the OutsideInModule module on the server ExchangeSrv01 and ExchangeSrv02.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ExchangeServerNames ExchangeSrv01, ExchangeSrv02 -ConfigureOverride "OutsideInModule" -Action "Block"

This syntax restores the configuration.xml from the backup that was created by a previous run of the script on the Exchange server where the script was executed.

.\ConfigureFipFsTextExtractionOverrides.ps1 -Rollback

Parameters

Parameter Description
ExchangeServerNames A list of Exchange servers that you want to run the script against.
SkipExchangeServerNames A list of Exchange servers that you don't want to execute the configuration action.
ConfigureOverride A list of file types that should be allowed to be processed by the OutsideInModule. The following input can be used: XlsbOfficePackage, XlsmOfficePackage, XlsxOfficePackage, ExcelStorage, DocmOfficePackage, DocxOfficePackage, PptmOfficePackage, PptxOfficePackage, WordStorage, PowerPointStorage, VisioStorage, Rtf, Xml, OdfTextDocument, OdfSpreadsheet, OdfPresentation, OneNote, Pdf, Html, AutoCad, Jpeg, Tiff.

If you want to enable the previous version of the OutsideInModule (8.5.3) to process file types, you must specify OutsideInModule as file type. Note that the OutsideInModule value cannot be used together with other file type values.

The input is case-sensitive.
Action String parameter to define the action that should be performed. Input can be Allow or Block. The default value is: Block
Rollback Switch parameter to restore the configuration.xml that was backed-up during a previous run of the script.
ScriptUpdateOnly Switch parameter to only update the script without performing any other actions.
SkipVersionCheck Switch parameter to skip the automatic version check and script update.