Thursday, October 14, 2010

Making OWA canary's sing using cookies in your OWA scripts

In Exchange 2007 SP3 Microsoft implemented canaries in OWA to help prevent man in the middle/cross scripting attacks in OWA gives a good explanation around why you would want to use a canary and what it is. But put basically a canary is a secret between the client and server in OWA this gets stored in cookie collection of your browser and then it gets submitted with the various requests that your browser sends. If your request doesn't have the canary then the server pretty much says "no OWA for you!". Because in the scripting world it can be useful as a workaround to instrument OWA to automate particular things such as enabling the extended junk-Email rule in OWA and Outlook in the past I've posted scripts that use OWA automation that have now pretty much been broken by the canary's.

So to fix this you need to add some code that will deal with the canary my favorite object to use for these type of scripts is the MSXML2.ServerXMLHTTP object because this handles all the FBA cookies in OWA without the need to add lines of code. To Get the canary from the cookie collection once you have logged on it needs another request to the mailbox your going to access which if things go well means your cookie collection should now be populated and you can just parse the cookie with a few lines of script eg

req.Open "GET", "https://" & snServername & "/owa/" & Targetmailbox & "", False
req.SetOption 2, 13056
req.setRequestHeader "Content-Type", "application/x-www-form-urlencoded"
req.setRequestHeader "Content-Length", Len(xmlstr)
req.send szXml
reqhedrarry = split(req.GetAllResponseHeaders(), vbCrLf,-1,1)
for each ent in reqhedrarry
wscript.echo ent
cookie = req.getResponseHeader("Set-Cookie")
if instr(cookie,"=") then
slen = instr(cookie,"=")+1
elen = instr(slen,cookie,"&")
canary = mid(cookie,slen,elen-slen)
wscript.echo "parsed canary : " & canary
end if

Once you have the canary you need to make sure you include it in your request for the junkemail script you need to modify the XML sent to look like

"<params><canary>" & canary & "</canary><fEnbl>1</fEnbl></params>"

And if everything is good your canary should sing to OWA to and achieve what it is your asking it to do. I've put a updated version of the junkemail script here

Monday, October 11, 2010

Modifying Outlook profiles in Outlook 2010 with VBS and Powershell

Outlook profiles can present somewhat of a challenge to any mail administrator regardless of the size of the mail system. One way of looking at Outlook profiles is that they are just a whole collection of registry settings on a machine which is true but the number and compelxity of structures involved means that if you want to write a script that will modify a particular profile for a particular user its not just as simple as modifying a single registry key. In previous versions of Outlook you could generally rely on the GUID "13dbb0c8aa05101a9bb000aa002fc45a" to locate the key where the values for the Exchange settings are located but if you have done any work with Outlook 2010 on windows 7 you will generally find this is nolonger the case and its now more reliable to enumerate all the keys under a particular profile and find a particular setting which will indicate this particular key has the values for the Exchange Setting you want to modify. The one thing that computers are really good at is processing things quickly so if you wanted to for instance modify the cache mode setting within a profile in VBS you could use the following code to locate the default profile

Set WshShell = WScript.CreateObject("WScript.Shell")
strComputer = "."
Set oReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv")
keypath = "Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles\"

profile = WshShell.RegRead("HKCU\"&keypath&"DefaultProfile")

Then enumerate all the keys under this profile to identify the key that has the cache mode value.

oReg.EnumKey HKEY_CURRENT_USER, (keypath & profile & "\"), arrSubKeys
For Each subkey In arrSubKeys
oReg.EnumValues HKEY_CURRENT_USER, (keypath & profile & "\" & subkey & "\"), arrSubValues
on error resume next
for each ValueKey in arrSubValues
if ValueKey = "00036601" then
oReg.GetBinaryValue HKEY_CURRENT_USER,(keypath & profile & "\" & subkey),"00036601",prProxyValRes
if not IsNull(prProxyValRes) then
if prProxyValRes(0) = "132" then
Wscript.echo "Cache Mode Enabled"
Wscript.echo "Cache Mode Disabled"
end if
end if
end if
on error goto 0

If you want to change the setting instead of just echoing it out the current setting then you would need to include something like

newValue1 = Array(&H84,&H05,&H00,&H00)
oReg.SetBinaryValue HKEY_CURRENT_USER,(keypath & profile & "\" & subkey),"00036601",newValue1

Note the hex value that you put in the second array element can vary depending on whether you want to enable the download public folder or shared folders check boxes.

If you think vbs is for mugs and you want to do this in powershell instead then you would need something like this

$RootKey = "Software\Microsoft\Windows NT\CurrentVersion\Windows Messaging Subsystem\Profiles"
$pkProfileskey = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey($RootKey, $true)
$defProf = $pkProfileskey.GetValue("DefaultProfile")
$pkSubProfilekey = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey(($RootKey + "\\" + $defProf), $true)
foreach($Valuekey in $pkSubProfilekey.getSubKeyNames()){
$pkSubValueKey = [Microsoft.Win32.Registry]::CurrentUser.OpenSubKey(($RootKey + "\\" + $defProf + "\\" + $Valuekey ), $true)
foreach ($values in $pkSubValueKey.GetValueNames())
if ($values -eq "00036601"){
if(($pkSubValueKey.GetValue("00036601"))[0] -eq 132){
"Cache Mode Enabled"}
"Cache Mode Disabled"