Published: May 23, 2024
Key Takeaways:
- Microsoft will begin the deprecation process for VBScript in the second half of 2024, with plans to completely remove it in future Windows versions.
- The deprecation will occur in phases, starting with making VBScript an optional feature in Windows 11 version 24H2, followed by disabling it by default in 2027, before its complete removal.
- Microsoft advises users to transition their VBScript-based applications and processes to modern alternatives to ensure continued functionality and security.
Last year, Microsoft unveiled its plans to end support for VBScript, a scripting language that has been a staple for Windows administrators for nearly three decades. The company announced yesterday that the deprecation process for this legacy tool will begin in the second half of 2024.
Microsoft introduced VBScript (Visual Basic Script) back in 1996. It’s primarily used to automate common administrative tasks in Windows environments, including file manipulation, configuration, and system management. VBScript also allows administrators to write simple scripts to test and prototype applications and system behaviors.
In recent years, cybercriminals have increasingly misused VBScript for malicious activities. They have crafted scripts that run natively on Windows machines, delivering remote access Trojans, downloaders, and other harmful software. This misuse allows hackers to steal sensitive data from compromised systems and move laterally across networks.
Microsoft has recently detailed its plan to deprecate VBScript in three phases. In the first phase, starting in the second half of 2024, VBScript will be available by default as an optional feature in Windows 11 version 24H2. This approach aims to minimize disruptions, allowing customers time to migrate their applications and processes away from the legacy scripting language.
In 2027, Microsoft plans to disable features on demand (FODs) and users will need to enable them manually through Start > Settings > System > Optional features. Finally, Microsoft will retire and completely remove VBScript from future versions of Windows. Consequently, any software that uses VBScript will no longer function properly.
Microsoft has not yet specified a timeline for the complete removal of VBScript. However, the company anticipates that customers will have transitioned to modern alternatives by the time this change occurs.
In the meantime, Microsoft advises that customers who still use VBScript in Visual Basic for Application (VBA) and web projects should migrate to PowerShell and JavaScript. “Technology has advanced over the years, giving rise to more powerful and versatile scripting languages such as JavaScript and PowerShell. These languages offer broader capabilities and are better suited for modern web development and automation tasks,” Microsoft explained.
Microsoft’s planned discontinuation of VBScript is part of its efforts to enhance organizations’ protection against malware attacks. This move aims to bolster security by urging customers to transition to more robust and versatile tools, effectively countering evolving cyber threats.