View Single Post
 
Old 01-18-2025, 05:24 AM
syl3786 syl3786 is offline Windows 10 Office 2019
Advanced Beginner
 
Join Date: Jan 2023
Posts: 97
syl3786 is on a distinguished road
Default

Quote:
Originally Posted by Guessed View Post
You've asked a bunch of questions and some are relatively painless to answer.

Yes, there are relatively inexpensive tools that you can buy to edit ribbons with.

Absolutely, you can edit the zip file's xml components but as you discovered, it won't work if you make a mistake with the code. Editing the zip file is easy but it is also easy to make a mistake which prevents the ribbon code from loading.


It is possible to create ribbon customisations that don't require vba code. So in that case your dotx/docx file is already safe and therefore trusted. However most customised ribbons do make use of code and the authoring of vba code is easier than the authoring of ribbons. Assuming your customisation requires code then (as recommended by Italophile) you would sign the code in the file and install the public key certificate on your user's machines so they can see the file is trusted.
Thanks for the detailed explanation!

I’ve been thinking about how to handle deploying macros in an organization, especially with the rise of AI-generated code. Do you have any suggested workflows for rolling out new macros to multiple users?

I ask because I’ve seen cases where users rely on AI to generate VBA code, and while it’s great for quick solutions, it can also lead to security issues. For example, I once came across a Word macro that someone created using AI—it automatically searched selected text on Google. At first glance, it seemed harmless, but it ended up triggering antivirus alerts because it was flagged for potentially malicious behavior (turned out there was a trojan in the code).

So, I’m curious:

How do you balance the convenience of AI tools with the need for secure, reliable macros?

Do you have any tips for ensuring macros are safe before deploying them across an organization?

Looking forward to hearing your thoughts!
Reply With Quote