From time to time, Microsoft deprecates legacy components in Windows, typically due to lack of use or weak security mechanisms. Just recently, we reported that the Redmond tech giant is discontinuing a lot of legacy web components in the operating system. Even earlier than that, as far back as October 2023, we have known about the deprecation of VBScript. Now, Microsoft has once again reminded customers about this and shared some recommendations about what to do with legacy projects.
For those unaware, VBScript is also known as Visual Basic Script and is the scripting language that Microsoft crafted almost three decades ago. It was included by default in Windows and was primarily used for automation purposes, but in recent times, the language has also been used as an attack surface for distribution of malware.
After announcing the deprecation of VBScript in future versions of Windows in October 2023, Microsoft shared a high-level timeline for this process in May 2024. Now, the company has shared some more details regarding this deprecation.
Visual Basic for Applications (VBA) developers typically use VBScript to automate tasks and extend the functionality of Office applications by executing external .vbs scripts or referencing libraries for regular expressions.
These developers and use-cases will be impacted by VBScript"s deprecation. Phase 1 is already in effect and may continue to run until 2026 or 2027. During this time period VBScript will be enabled by default as a Feature on Demand (FOD) and existing projects shouldn"t be impacted. However, when Phase 2 kicks off, this FOD will be disabled. Finally, Phase 3, which begins at an unconfirmed date, will completely remove VBScript for Windows SKUs, directly impacting the two use-cases mentioned previously.
Microsoft has requested customers to use the RegExp classes included after Office Version 2508 by default. This will enable developers to continue using RegExp in VBScript, but it does require a Microsoft 365 subscription. You can find more technical details regarding the actual implementation and binding process in Microsoft"s blog post here.
The company has recommended customers to upgrade to the latest Office version through Microsoft 365 to leverage the new RegExp implementation. This will allow developers to use the functionality in the Visual Basic Editor (VBE) without adding vbscript.dll. Most importantly, you should check your VBA projects to ensure that they continue to work in environments where VBScript is disabled.