I'm stuck between a client and a vendor, and I need to validate my response to this issue:
The client has a production server that runs an IIS_based health care app.
The vendor recently came out with an "enhancement" whereby a user could upload an excel file to the server, the server would then run a set of macros to process the data and further upload the resultant data to a government system.
My first reaction is "WTF, you want me to enable excel macros on a production server, AND the user uploads the excel files from their own PC????"
I asked them what if the excel file the user uploads is macro infested? Response: "hmmmm"
Am I off-base here? Is there a way to secure all of this that I am not aware of?
You could issue digital certificates to the users who will be uploading these workbooks, and require them to be digitally signed macros. Make sure these are real certificates, issued by a reliable certificate
Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.
The viewer will learn how to simulate a series of coin tosses with the rand() function and learn how to make these “tosses” depend on a predetermined probability.
Flipping Coins in Excel: Enter =RAND() into cell A2:
Recalculate the random variable…
Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…