<div>
<div class="content wysiwyg-content">
Hi Fellow experts,<br />
<br />
I'm stuck between a client and a vendor, and I need to validate my response to this issue:<br />
<br />
The client has a production server that runs an IIS_based health care app.<br />
The vendor recently came out with an &quot;enhancement&quot; whereby a user could upload an excel file to the server, the server would then run a set of macros to process the data and further upload the resultant data to a government system.<br />
<br />
My first reaction is &quot;WTF, you want me to enable excel macros on a production server, AND the user uploads the excel files from their own PC????&quot;<br />
<br />
I asked them what if the excel file the user uploads is macro infested? &nbsp; Response: &quot;hmmmm&quot;<br />
<br />
Am I off-base here? &nbsp;Is there a way to secure all of this that I am not aware of?<br />

</div>
</div>


Hi Fellow experts,

I'm stuck between a client and a vendor, and I need to validate my response to this issue:

The client has a production server that runs an IIS_based health care app.
The vendor recently came out with an "enhancement" whereby a user could upload an excel file to the server, the server would then run a set of macros to process the data and further upload the resultant data to a government system.

My first reaction is "WTF, you want me to enable excel macros on a production server, AND the user uploads the excel files from their own PC????"

I asked them what if the excel file the user uploads is macro infested?   Response: "hmmmm"

Am I off-base here?  Is there a way to secure all of this that I am not aware of?


Enable excel macros on production server??

IIS is Internet Information Services, the web server included with Windows Server operating systems. All current versions are built on a modular architecture; modules can be added or removed individually so that those required for specific functionality are installed. The full installation of IIS includes HTTP, security, content, compression, caching, logging and diagnostics.

Microsoft IIS Web Server

Microsoft Office is an integrated suite of applications that includes Outlook, Word, Excel, Access, PowerPoint, Visio and InfoPath, along with a number of tools to assist in making the individual components work together. Coding within and between the projects is done in Visual Basic for Applications, known as VBA.