A Windows Vista forum. Vista Banter

Welcome to Vista Banter.

You are currently viewing our boards as a guest which gives you limited access to view most discussions, articles and access our other FREE features. By joining our free community you will have access to ask questions and reply to others posts, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today!

If you have any problems with the registration process or your account login, please contact contact support.

Go Back   Home » Vista Banter forum » Microsoft Windows Vista » Security and Windows Vista
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

Security and Windows Vista A forum for discussion on security issues with Windows Vista. (microsoft.public.windows.vista.security)

VBscript not UAC and IE7 friendly



 
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old March 27th 08, 06:25 AM posted to microsoft.public.windows.vista.security
Deleauvive
external usenet poster
 
Posts: 1
Default VBscript not UAC and IE7 friendly


Hello Vista heads ,

I wanted to post here on vistax64 forums about my findings, related to
VB scripting, with Windows Vista in mind.
Firstly, I consider mysef a self-made power user of Windows products
mostly for multimedia tasks, so I am not sure my voice will be heard,
amongst IT experts and developers.

Also, I need to make something clear : There are still many websites
where one can download VB scripts and the likes. I don't mind that much
that the scripts were not tested with Windows Vista, but if you maintain
such web sites, please make a note stating that the methods of invoking
objects have considerably evolved.

Here is the test I conducted : I ran a simple VB script, with a
createobject internetexplorer.application instruction on a freshly
installed Vista machine. The script ran fine, until I disabled UAC.
Well, I didn't start this thread to fuel the debate whether UAC should
be turned off or not. Turning it on again didn't solve the problem.

I want to point out that Microsoft should warn people about *severe*
issues with code based on Visual Basic 6. I've read it was difficult for
them to publish Powershell, because of Vista security features. My guess
is that if the VB6 runtime was relying on ONE dll (like VB5 does), may
be things wouldn't be so bad.

Here is my point : If you are still an active script developer you
should turn to Powershell now, but also give a hand to people who have a
hard time running the scripts under Vista (the infamous cannot create
object error). The worst part of the story is that SOME VB scripts under
CERTAIN circumstances, on SOME machine may work fine, even on Vista PCs.
By the way, installing the Service Pack 1 improved things a bit, but not
by much.

For example, I had no problem with scripts made for Media Player. As I
said earlier, my abilities concerning editing scripts are rather
limited, I simply ran a few scripts and took notice of the bugs and
crashes. I have an Intel based computer, so this is not hardware
related.

These scripts had in common the use of createobject methods. I can
safely say that such methods interfere *very badly* with Vista security
features (Secure Desktop, UAC, virtualization of files & registry...).
At all cost, turn to Powershell if you want to use COM objects in
scripts. Windows Script Host was halted in the early stages of Vista
development.

Again, Powershell 2 is here for your scripting needs, I am not saying
it's perfect but it was made to provide automation features within a
production environment. Quite frankly, its debugging features are miles
away from those used internally, in the good old days of batch files.
Also, you certainly have noticed the job can be done using less
declarations and statements.

It would be a great relief if developers joined hands with IT Pros to
cool down things a bit. More and more people will turn to Vista SP1,
including some of those XP nostalgia driven we all know of. (you don't
want to wait for Vista 11, as it will probably be delayed too) We all
have an opportunity to deal with the issues brought by the extensive use
of deprecated code & components in the past...

I hope no one felt offended, and that I didn't sound too bold. Of
course, misconceptions always come in the way when you're trying to
convince specialists in their respective field. Note that if the scripts
I am talking about weren't useful at all, I wouldn't mind them to slowly
fade away.


--
Deleauvive
  #2 (permalink)  
Old March 28th 08, 08:02 PM posted to microsoft.public.windows.vista.security
Steve Easton
external usenet poster
 
Posts: 181
Default VBscript not UAC and IE7 friendly

As a power user, you should know that createobject internetexplorer.application
in a VB Script uses ActiveX

;-)

--

Steve Easton


"Deleauvive" wrote in message news

Hello Vista heads ,

I wanted to post here on vistax64 forums about my findings, related to
VB scripting, with Windows Vista in mind.
Firstly, I consider mysef a self-made power user of Windows products
mostly for multimedia tasks, so I am not sure my voice will be heard,
amongst IT experts and developers.

Also, I need to make something clear : There are still many websites
where one can download VB scripts and the likes. I don't mind that much
that the scripts were not tested with Windows Vista, but if you maintain
such web sites, please make a note stating that the methods of invoking
objects have considerably evolved.

Here is the test I conducted : I ran a simple VB script, with a
createobject internetexplorer.application instruction on a freshly
installed Vista machine. The script ran fine, until I disabled UAC.
Well, I didn't start this thread to fuel the debate whether UAC should
be turned off or not. Turning it on again didn't solve the problem.

I want to point out that Microsoft should warn people about *severe*
issues with code based on Visual Basic 6. I've read it was difficult for
them to publish Powershell, because of Vista security features. My guess
is that if the VB6 runtime was relying on ONE dll (like VB5 does), may
be things wouldn't be so bad.

Here is my point : If you are still an active script developer you
should turn to Powershell now, but also give a hand to people who have a
hard time running the scripts under Vista (the infamous cannot create
object error). The worst part of the story is that SOME VB scripts under
CERTAIN circumstances, on SOME machine may work fine, even on Vista PCs.
By the way, installing the Service Pack 1 improved things a bit, but not
by much.

For example, I had no problem with scripts made for Media Player. As I
said earlier, my abilities concerning editing scripts are rather
limited, I simply ran a few scripts and took notice of the bugs and
crashes. I have an Intel based computer, so this is not hardware
related.

These scripts had in common the use of createobject methods. I can
safely say that such methods interfere *very badly* with Vista security
features (Secure Desktop, UAC, virtualization of files & registry...).
At all cost, turn to Powershell if you want to use COM objects in
scripts. Windows Script Host was halted in the early stages of Vista
development.

Again, Powershell 2 is here for your scripting needs, I am not saying
it's perfect but it was made to provide automation features within a
production environment. Quite frankly, its debugging features are miles
away from those used internally, in the good old days of batch files.
Also, you certainly have noticed the job can be done using less
declarations and statements.

It would be a great relief if developers joined hands with IT Pros to
cool down things a bit. More and more people will turn to Vista SP1,
including some of those XP nostalgia driven we all know of. (you don't
want to wait for Vista 11, as it will probably be delayed too) We all
have an opportunity to deal with the issues brought by the extensive use
of deprecated code & components in the past...

I hope no one felt offended, and that I didn't sound too bold. Of
course, misconceptions always come in the way when you're trying to
convince specialists in their respective field. Note that if the scripts
I am talking about weren't useful at all, I wouldn't mind them to slowly
fade away.


--
Deleauvive



 




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 06:39 PM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2024, Jelsoft Enterprises Ltd.Search Engine Optimization by vBSEO 3.0.0 RC6
Copyright ©2004-2024 Vista Banter.
The comments are property of their posters.