<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2522 " id="quads-ad2522" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<h2 class="wp-block-heading">Story:</h2>



<p>I got a request from a client who constantly gets CVs and have to download them for the hiring managers to review them and wanted to get some way an automated mechanism of downloading all those emails.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2524 " id="quads-ad2524" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2529 " id="quads-ad2529" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2531 " id="quads-ad2531" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p>Googling lead me to the exchangelib project which is a great python source for such a purpose. I built my local lab of the following servers to test it</p>



<ol class="wp-block-list" type="1"><li>AD 2016 moh10ly.local</li><li>Exchange 2016 = exch01.moh10ly.local</li><li>AAD = Another 2016 server to test from</li></ol>



<p>I built my local Certification authority and made sure that all servers has the CA installed to avoid any issues on python.</p>



<p>If you are going to use this on your production environment you can basically install Python anywhere even on your own computer and it should work if EWS is exposed and Autodiscover is configured propely and have a valid and trusted 3rd party Certificate.</p>



<p>However, If you would like to schedule this to work on a daily basis and let it download attachments from mailbox then you&#8217;ll need a server or at least a computer to rely on that it would be on when the scheduled task works. </p>



<h2 class="wp-block-heading">Prerequisites :</h2>



<p>Windows Server 2016:</p>



<ul class="wp-block-list"><li>Download and install latest version of Python 3.10</li><li>From CMD run the following cmd<ul><li>Pip install exchangelib</li><li>Pip install exchangelib[kerberos]</li><li>Pip install exchangelib[sspi]</li></ul></li><li>Download and install MIT Kerberos MSI from <a href="https://web.mit.edu/KERBEROS/dist">https://web.mit.edu/KERBEROS/dist</a> 64bit version</li><li>If you&#8217;re doing this on a local Lab without a trusted 3rd certificate you&#8217;ll need to make sure to export your certificatation Authority Certificate in CER format, copy the cert and add it to the end of Python root PEM.</li></ul>



<p></p>



<h2 class="wp-block-heading">Testing Scenario</h2>



<ul class="wp-block-list"><li>I created two mailboxes on my local Exchange server lab</li><li>I have sent myself an email to info@moh10ly.com with 3 attachments in it as you can see.</li><li>Setup a server to use to download all attachments from the mailbox.</li></ul>



<figure class="wp-block-image size-full"><img src="https://www.moh10ly.com/wp-content/uploads/2022/01/image.png" alt="" class="wp-image-10113"/> 

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2528 " id="quads-ad2528" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>
 
</figure>



<h2 class="wp-block-heading">Prepare your Python Script</h2>



<ul class="wp-block-list"><li>Import Packages in order to use them. </li></ul>



<p></p>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">from exchangelib import DELEGATE, IMPERSONATION, Account, Credentials, EWSDateTime, EWSTimeZone, Configuration, NTLM, GSSAPI, CalendarItem, Message, Mailbox, Attendee, Q, ExtendedProperty, FileAttachment, ItemAttachment, HTMLBody, Build, Version, FolderCollection
</pre>



<ul class="wp-block-list"><li>Prepare Credentials of the user you would like to retrieve the attachments from. </li></ul>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">credentials = Credentials(username='moh10ly\info', password='Bc12345$')</pre>



<ul class="wp-block-list"><li>Enter your Exchange server configuration. Since autodiscover didn&#8217;t work for me as I don&#8217;t have a public certifiate so I went ahead and placed the server configuration.</li></ul>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">ews_url = 'https://mail.moh10ly.com/EWS/exchange.asmx'
ews_auth_type = 'NTLM'
primary_smtp_address = 'info@moh10ly.com'
config = Configuration(service_endpoint=ews_url, credentials=credentials, auth_type=ews_auth_type)</pre>



<ul class="wp-block-list"><li>Place the account type and configuration </li></ul>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">account = Account(
primary_smtp_address=primary_smtp_address,
config=config, autodiscover=False,
access_type=DELEGATE)</pre>



<ul class="wp-block-list"><li>Configure the local path of where you want to save attachments to on the server where this code is going to be launched from. in my code example I have created a folder called &#8220;Temp&#8221; on the C root drive and that&#8217;s what I will use. </li><li>You can pickup a different local path by changing the /temp path in the line &#8220;local_path = os.path.join(&#8216;<strong>/temp</strong>&#8216;, attachment.name)&#8221;</li></ul>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">import os.path
from exchangelib import Account, FileAttachment, ItemAttachment, Message

some_folder = account.inbox 
for item in some_folder.all():
 for attachment in item.attachments:
 if isinstance(attachment, FileAttachment):
 local_path = os.path.join('/temp', attachment.name)
 with open(local_path, 'wb') as f:
 f.write(attachment.content)
</pre>



<p>This by now should be working fine and you should see that it is saving all your mailbox attachments to the folder that you have configured in the path section of the code.</p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2523 " id="quads-ad2523" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<p></p>



<figure class="wp-block-image size-full"><img src="https://www.moh10ly.com/wp-content/uploads/2022/01/image-1.png" alt="" class="wp-image-10114"/></figure>



<p></p>



<h2 class="wp-block-heading">Complete code to run</h2>



<pre class="EnlighterJSRAW" data-enlighter-language="generic" data-enlighter-theme="" data-enlighter-highlight="" data-enlighter-linenumbers="" data-enlighter-lineoffset="" data-enlighter-title="" data-enlighter-group="">Working config


from exchangelib import DELEGATE, IMPERSONATION, Account, Credentials, EWSDateTime, EWSTimeZone, Configuration, NTLM, GSSAPI, CalendarItem, Message, Mailbox, Attendee, Q, ExtendedProperty, FileAttachment, ItemAttachment, HTMLBody, Build, Version, FolderCollection


credentials = Credentials(username='moh10ly\info', password='Bc12345$')

ews_url = 'https://mail.moh10ly.com/EWS/exchange.asmx'
ews_auth_type = 'NTLM'
primary_smtp_address = 'info@moh10ly.com'
config = Configuration(service_endpoint=ews_url, credentials=credentials, auth_type=ews_auth_type)


account = Account(
primary_smtp_address=primary_smtp_address,
config=config, autodiscover=False,
access_type=DELEGATE)

import os.path
from exchangelib import Account, FileAttachment, ItemAttachment, Message

some_folder = account.inbox 
for item in some_folder.all():
 for attachment in item.attachments:
 if isinstance(attachment, FileAttachment):
 local_path = os.path.join('/temp', attachment.name)
 with open(local_path, 'wb') as f:
 f.write(attachment.content)


-----------------

#To download all attachments in the inbox:

for item in account.inbox.all():
 for attachment in item.attachments:
 if isinstance(attachment, FileAttachment):
 local_path = os.path.join('/sky', attachment.name)
 with open(local_path, 'wb') as f, attachment.fp as fp:
 buffer = fp.read(1024)
 while buffer:
 f.write(buffer)
 buffer = fp.read(1024)
 print('Saved attachment to', local_path)

</pre>



<p>Hope this have helped you</p>



<p></p>



<h2 class="wp-block-heading">References:</h2>



<p><a href="https://towardsdatascience.com/download-email-attachment-from-microsoft-exchange-web-services-automatically-9e20770f90ea">https://towardsdatascience.com/download-email-attachment-from-microsoft-exchange-web-services-automatically-9e20770f90ea</a></p>



<h2 class="wp-block-heading">Check under attachments:</h2>



<p><a href="https://ecederstrand.github.io/exchangelib/">https://ecederstrand.github.io/exchangelib/</a></p>



<p><a href="https://pypi.org/project/exchangelib/">https://pypi.org/project/exchangelib/</a></p>



<figure class="wp-block-embed is-type-wp-embed is-provider-activestate wp-block-embed-activestate"><div class="wp-block-embed__wrapper">
https://www.activestate.com/resources/quick-reads/how-to-install-and-use-exchangelib-python/
</div></figure>



<h2 class="wp-block-heading">Troubleshoot cert issue</h2>



<p><a href="https://stackoverflow.com/questions/51925384/unable-to-get-local-issuer-certificate-when-using-requests-in-python">https://stackoverflow.com/questions/51925384/unable-to-get-local-issuer-certificate-when-using-requests-in-python</a></p>
<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2525 " id="quads-ad2525" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>




<h2 class="wp-block-heading">With graph</h2>



<p><a href="https://techcommunity.microsoft.com/t5/identity-authentication/what-oauth-permissions-needed-for-exchangelib/m-p/2858179">https://techcommunity.microsoft.com/t5/identity-authentication/what-oauth-permissions-needed-for-exchangelib/m-p/2858179</a></p>

<!-- WP QUADS Content Ad Plugin v. 2.0.92 -->
<div class="quads-location quads-ad2526 " id="quads-ad2526" style="float:none;margin:0px 3px 3px 3px;padding:0px 0px 0px 0px;" data-lazydelay="0">

</div>


Reset and manage your Active Directory users' Passwords Active Directory is one of the most…
Finding Exchange Database hidden mailboxes. Story:Maybe you have been in this situation before, trying to…
If you're using a Proxy server in your firewall or in your network and have…
Story:I got some clients that have reported some of their users being locked out and…
Delegate Permissions This is a code that I have wrote recently to check if an…
550 relay not permitted distribution group contact Symptoms When trying to add an external contact…
View Comments
In your example, you are able to save all attachments that are FileAttachment types. I'm running into an issue where some of my attachments are ItemAttachment types. It doesn't understand "f.write(attachment.content)".
How would you be able to save the ItemAttachment?