Solved

Enable excel macros on production server??

Posted on 2009-05-07
2
216 Views
Last Modified: 2012-05-06
Hi Fellow experts,

I'm stuck between a client and a vendor, and I need to validate my response to this issue:

The client has a production server that runs an IIS_based health care app.
The vendor recently came out with an "enhancement" whereby a user could upload an excel file to the server, the server would then run a set of macros to process the data and further upload the resultant data to a government system.

My first reaction is "WTF, you want me to enable excel macros on a production server, AND the user uploads the excel files from their own PC????"

I asked them what if the excel file the user uploads is macro infested?   Response: "hmmmm"

Am I off-base here?  Is there a way to secure all of this that I am not aware of?
0
Comment
Question by:SunnySlacker
2 Comments
 
LVL 13

Accepted Solution

by:
Brian Withun earned 500 total points
ID: 24330320
You could issue digital certificates to the users who will be uploading these workbooks, and require them to be digitally signed macros.  Make sure these are real certificates, issued by a reliable certificate authorithy like Thawt or Verisign.

On the server, trust the issuing certificate authority so that Excel will run the signed macros without challenging them.

From VisualBasic: Tools > Digital Signature...

Then, nobody except your certificate holders will be able to get their macros to run on your server.

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When it comes to showing a 404 error page to your visitors, you do not want that generic page to show, and you especially do not want your hosting provider’s ad error page to show either. In this article, I will show you how to enable the custom 40…
My experience with Windows 10 over a one year period and suggestions for smooth operation
This video shows where to find the word count, how to display it, and what it breaks down to in Microsoft Word.
The viewer will learn how to  create a slide that will launch other presentations in Microsoft PowerPoint. In the finished slide, each item launches a new PowerPoint presentation and when each is finished it automatically comes back to this slide: …

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question