Skip to content

ConfigureFipFsTextExtractionOverrides

Download the latest release: ConfigureFipFsTextExtractionOverrides.ps1

Note

Starting in the Exchange Server March 2024 security update we disable the use of the Oracle Outside In Technology (also known as OutsideInModule or OIT) in Microsoft Exchange Server due to multiple security vulnerabilities in the module. The OutsideInModule was used by the Microsoft Forefront Filtering Module to extract information from different file types, to perform content inspection as part of the Exchange Server Data Loss Prevention (DLP) or Exchange Transport Rules (ETR) features.

The ConfigureFipFsTextExtractionOverrides.ps1 script can be used to manipulate the usage of OutsideInModule that is disabled by default in the Exchange Server March 2024 security update.

There are two scenarios in which the script could be used:

  • It can be used to explicitly enable file types that should be processed by the help of the OutsideInModule.
  • It can be used to override the version of the OutsideInModule that should be used for processing file types, which were explicitly enabled to be processed by the OutsideInModule. After installing the March 2024 security update, Exchange Server uses the latest version of the OutsideInModule version 8.5.7 by default. By activating this override, OutsideInModule version 8.5.3 will be used.

Details about the change that was done as part of the March 2024 security update can be found in KB5037191.

Details about the security vulnerability can be found in the MSRC security advisory.

Warning

Microsoft strongly recommends not overriding the default behavior that was introduced with the March 2024 security update if there are no functional issues that affect your organization's mail flow.

Warning

If you are running this script against an Exchange 2019 CU15 server or newer, make sure you are using the latest version of the script as there has been changes done to the script to account for what is supported with this version of Exchange.

Requirements

This script must be run as Administrator in Exchange Management Shell (EMS). The user must be a member of the Organization Management role group.

How To Run

Examples:

This syntax enables processing of Jpeg and AutoCad file types by the help of the OutsideInModule on the server where the command was executed.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ConfigureOverride "Jpeg", "AutoCad" -Action "Allow"

This syntax disables processing of Jpeg and AutoCad file types by the help of the OutsideInModule on the server ExchangeSrv01 and ExchangeSrv02.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ExchangeServerNames ExchangeSrv01, ExchangeSrv02 -ConfigureOverride "Jpeg", "AutoCad" -Action "Block"

This syntax causes Exchange Server to use the previous version of the OutsideInModule. The override will be enabled on the system on which the script was executed. Note that this can make your system vulnerable to known vulnerabilities in the previous version and should not be used unless explicitly advised by Microsoft.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ConfigureOverride "OutsideInModule" -Action "Allow"

This syntax disables the override of the version of the OutsideInModule module on the server ExchangeSrv01 and ExchangeSrv02.

.\ConfigureFipFsTextExtractionOverrides.ps1 -ExchangeServerNames ExchangeSrv01, ExchangeSrv02 -ConfigureOverride "OutsideInModule" -Action "Block"

This syntax restores the configuration.xml from the backup that was created by a previous run of the script on the Exchange server where the script was executed.

.\ConfigureFipFsTextExtractionOverrides.ps1 -Rollback

Parameters

Parameter Description
ExchangeServerNames A list of Exchange servers that you want to run the script against.
SkipExchangeServerNames A list of Exchange servers that you don't want to execute the configuration action.
ConfigureOverride A list of file types that should be allowed to be processed by the OutsideInModule. The following input can be used: XlsbOfficePackage, XlsmOfficePackage, XlsxOfficePackage, ExcelStorage, DocmOfficePackage, DocxOfficePackage, PptmOfficePackage, PptxOfficePackage, WordStorage, PowerPointStorage, VisioStorage, Rtf, Xml, OdfTextDocument, OdfSpreadsheet, OdfPresentation, OneNote, Pdf, Html, AutoCad, Jpeg, Tiff.

If you want to enable the previous version of the OutsideInModule (8.5.3) to process file types, you must specify OutsideInModule as file type. Note that the OutsideInModule value cannot be used together with other file type values.

If on Exchange 2019 CU15, we now allow VsdmOfficePackage, VsdxOfficePackage, VssmOfficePackage, VssxOfficePackage, VstmOfficePackage, VstxOfficePackage, VisioXml, PublisherStorage to be used to be able to move back to the IFiltersOnly type if required. Another change with CU15 support, is that we no longer support changing the OutsideInModule as we are now using DocParser as the new method.

The input is case-sensitive.
Action String parameter to define the action that should be performed. Input can be Allow or Block. The default value is: Block

With Exchange 2019 CU15, Allow will move the Type provided to the original location prior to CU15. The Block action will move the Type back to PreferDocParser if applicable.
Rollback Switch parameter to restore the configuration.xml that was backed-up during a previous run of the script.
ScriptUpdateOnly Switch parameter to only update the script without performing any other actions.
SkipVersionCheck Switch parameter to skip the automatic version check and script update.