Symantec Blocking Outlook Rule Powershell Script.

I need a solution

I have a Outlook client rule running on a virtual machine that runs a VB script upon receiving mail. This script calls a powershell script that writes data from specific emails to a database. This worked great without fail for about a year. I’m not sure what exactly triggred the problem, probably an upgrade to the Symantec client or definitions I’m guessing, but now this script gets blocked by Symantec client. I have added exclusions to the file powershell.exe, but this does not seem to solve the problem. My only solution thus far has been to actually disable the Symantec client on that machine, and maybe that’s ultimately the final solution. I realize there are a lot of dangers going around with malicious powershell scripts and Outlook which is probably the reasoning behind this heightened security, but I am careful with this one box that has these rules, and really need this script to function. Is there any way to green light powershell scripts or specific ones without disabling Symantec entirely?

0

Related:

  • No Related Posts

7022945: MissingMemberException error thrown when using EXTRACOM “late bound” VB.NET syntax

A MissingMemberException error is thrown when using EXTRACOM “late bound” Visual Basic .NET (VB.NET) syntax with Reflection Desktop 16, Reflection 2014, or Reflection 2011. This error occurs when working with the Reflection EXTRACOM API using VB.NET “late binding” syntax, (i.e., declaring variables “As Object”) so that VB.Net will look them up at runtime. Instantiating the EXTRACOM “System” object using the VB.NET “CreateObject” function succeeds, but any attempt to use methods or properties supplied by the System object will cause an exception in Visual Studio 2010 or 2012, as follows:

System.MissingMemberException was unhandled

HResult=-2146233070

Message=Public member ‘ActiveSession’ on type ‘MarshalByRefObject’ not found.

Source=Microsoft.VisualBasic

StackTrace:

at Microsoft.VisualBasic.CompilerServices.Symbols.Container.GetMembers(String& MemberName, Boolean ReportErrors)

at Microsoft.VisualBasic.CompilerServices.NewLateBinding.ObjectLateGet(Object Instance, Type Type, String MemberName, Object[] Arguments, String[] ArgumentNames, Type[] TypeArguments, Boolean[] CopyBack)

at Microsoft.VisualBasic.CompilerServices.NewLateBinding.LateGet(Object Instance, Type Type, String MemberName, Object[] Arguments, String[] ArgumentNames, Type[] TypeArguments, Boolean[] CopyBack)

at EXTRALateBinding.Module1.Main() in c:usersnedgedocumentsvisual studio 2010ProjectsEXTRALateBindingEXTRALateBindingModule1.vb:line 8

at System.AppDomain._nExecuteAssembly(RuntimeAssembly assembly, String[] args)

at System.AppDomain.ExecuteAssembly(String assemblyFile, Evidence assemblySecurity, String[] args)

at Microsoft.VisualStudio.HostingProcess.HostProc.RunUsersAssembly()

at System.Threading.ThreadHelper.ThreadStart_Context(Object state)

at System.Threading.ExecutionContext.RunInternal(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state, Boolean preserveSyncCtx)

at System.Threading.ExecutionContext.Run(ExecutionContext executionContext, ContextCallback callback, Object state)

at System.Threading.ThreadHelper.ThreadStart()

This exception error does not occur when using the EXTRACOM in VBScript (.vbs file). This exception error also does not occur when using Excel VBA.

Related:

  • No Related Posts

7021548: IIS 64-Bit Mode Error When Building Verastream .NET Web Application Project

Use the following information to check or change the IIS mode, and configure Web Builder to match.

IIS Configuration on Windows Server 2008 or Windows 7

Use the following steps to check or change the IIS mode on Windows Server 2008 or Windows 7:

  1. Run the IIS Manager by opening Start > Control Panel > System and Security > Administrative Tools > Computer Management > Services and Applications > Internet Information Services (IIS) Manager. The steps may vary depending on your operating system.
  2. In the Connections frame, open Application Pools and select your web site pool.
  3. In the right pane, under Edit Application Pool, click Advanced Settings.
  4. In the Advanced Settings dialog, in the “(General)” section, select “Enable 32-Bit Applications.”
  5. Set this value to False to run in 64-bit mode, or set it to True to run in 32-bit mode.

IIS Configuration on Windows Server 2003 or Windows XP

Use the following steps to check the IIS mode on Windows Server 2003 or Windows XP.

  1. Open Control Panel > Administrative Tools > Computer Management > Services and Applications > Internet Information Services (IIS) Manager > Web Sites. The steps may vary depending on your operating system.
  2. Right-click your web site and click Properties.
  3. On the Home Directory tab, under Application settings, click Configuration.
  4. In the Application extensions list, scroll down to extension .aspx and mouseover its Executable Path.
  5. The mouseover popup text indicates the .NET Framework directory that is being used.
    Mode
    Microsoft .NET Framework Directory
    32-bit
    C:WindowsMicrosoft.NETFrameworkv2.0.50727
    64-bit
    C:WindowsMicrosoft.NETFramework64v2.0.50727

Alternative IIS Configuration using Command Line Utility

Use the following information to check or change the IIS mode in a Command Prompt window. Note: On Windows 7 and later operating systems, you must install “IIS 6 Management Compatibility” to run the Adsutil.vbs utility. See also Technical Note 10081.

To determine the IIS mode, enter:

cscript %SYSTEMDRIVE%inetpubadminscriptsadsutil.vbs get W3SVC/AppPools/Enable32bitAppOnWin64

If the command returns False (0), IIS is in 64-bit mode. If it returns True (1), IIS is in 32-bit mode.

If you prefer to change IIS from 64-bit mode to 32-bit mode, run the following commands to register 32-bit ASP.NET with IIS and enable IIS 32-bit mode:

C:WindowsMicrosoft.NETFrameworkv2.0.50727aspnet_regiis.exe –i

cscript.exe C:inetpubAdminScriptsadsutil.vbs set W3SVC/AppPools/Enable32BitAppOnWin64 1

Configuring Verastream Web Builder

Once you have checked or changed the IIS mode, follow the steps below to configure Web Builder to match.

  1. In Web Builder, click Options > Web Builder Settings.
  2. In the left pane, select Microsoft Tools.
  3. In the .NET Framework directory field, browse to and select the appropriate directory, and then click Open > OK.
    Mode
    Microsoft .NET Framework Directory
    32-bit
    C:WindowsMicrosoft.NETFrameworkv2.0.50727
    64-bit
    C:WindowsMicrosoft.NETFramework64v2.0.50727
  1. Build your Verastream project.

Note: Once a Verastream project is built, it can run in either a 32- or 64-bit version of IIS. It is just the build process that needs to be configured to use the correct .NET Framework version.

Web Builder uses the .NET Framework aspnet_regiis.exe registration tool to install ASP.NET and update IIS.

Beginning in VHI version 7.5, a new installation defaults to use the 64-bit .NET Framework for the Legacy .NET Web Application project type. If you upgraded from a pre-7.5 installation, your previous setting is retained.

Related:

  • No Related Posts

7021546: Web Builder Error “Failed to exec adsutil”

This document (7021546) is provided subject to the disclaimer at the end of this document.

Environment

Verastream Host Integrator version 7.0 or higher

Situation

When Verastream Host Integrator (VHI) Development Kit is installed on newer Windows platforms, and you attempt to generate a .NET web application in Web Builder, you may see the error “Failed to exec adsutil.”

View Full Size

Figure 1. 'Failed to exec adsutil. Reason: Input Error: Can not find script file


Figure 1. ‘Failed to exec adsutil. Reason: Input Error: Can not find script file “C:InetpubAdminScriptsadsutil.vbs”.’

Resolution

To enable IIS Adsutil.vbs, follow these steps:

  1. Click Start > Control Panel.
  2. Click Programs. Note: Skip this step if you are using Classic View.
  3. Open Programs and Features > Turn Windows features on or off. Note: If Windows User Account Control (UAC) enabled, administrative rights are required and a confirmation prompt is displayed.
  4. Expand Internet Information Services > Web Management Tools by clicking the “+” icons.
  5. Select the checkbox for IIS 6 Management Compatibility. The filled box indicates that the feature is partially enabled, which is sufficient; it is not necessary to select all subcomponents.
  6. To avoid other errors when building or running .NET web applications, ASP.NET should also be enabled (under Internet Information Services > World Wide Web Services > Application Development Features). For additional information, see Technical Note 10124.
  7. Click OK. The features are installed.
  8. When the installation is complete, re-deploy your .NET project. Note: If Windows User Account Control is enabled, you must run Web Builder version 7.0 and earlier as an administrator. (This is not necessary in version 7.1; the iisdeploy.exe utility will prompt you to run as administrator.)

Cause

Microsoft Windows 7, Windows Server 2008, and Windows Vista include version 7.5 or 7.0 of the Internet Information Services (IIS) web server. VHI Web Builder uses the IIS version 6.0 Adsutil.vbs administration utility to configure IIS to run your generated project. When using IIS version 7.x, “IIS 6 Management Compatibility” must be enabled for Adsutil.vbs to run.

Additional Information

Disclaimer

This Support Knowledgebase provides a valuable tool for NetIQ/Novell/SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented “AS IS” WITHOUT WARRANTY OF ANY KIND.

Related:

  • No Related Posts

Need vb script

I need a solution

Recenlty realized on older version of Altiris, I had mapped drives in inventory in table Inv_HW_Logical_Disk.  When running an SQL against ne db, I found that info missing.  Researching, came across and article that stated inventory does not capture printers and mapped drives: https://support.symantec.com/en_US/article.TECH145268.html.  Creating a neew policy as outlined did not work I need a vb script to  get HKEY Current UserNetwork subkeys (name) and its corresponding strvaluename “remotePath” and its value.

I was able to get this on some pcs woth powershell, but on most it is not returning all mapped drives.  Better success on WIn 7 and less so on Win 8.1 and 10. Possibly  restriction on powershell running.

After trying to work with many vb scripts and piece it together, I am still nowhere.

 So, I need a script to replace what Altiris Inventory USED to do. I already have the custom table with some info from the powershell script, but perhaps vb would be better.

For each Drive letter, I need the RemotePath  value.  For example L: RemotePath value is \oi-oitnst-m3-e.njes.state.nj.ussoftwarelibrary

THE GUID of the table is e30cf469-1720-4452-b3bc-7248d42a861a and the columns are Name ( the mapped drive letter (subkey) and ProviderName ( the path value).

I do not script so this is quite difficult.  Any help would be appreciated

0

Related:

  • No Related Posts

Disable saving of VBS files from mail

I need a solution

More malware is coming in via links to web sites that want to to download and runa VB script

Is there a way to disable the saving (or execution) of VB script files

I see in Policies / Applicaiton and Device Control / Application Control that there is an option to enable various scripts and files (eg : autorun.inf)

Is there any downside in enabling AC7 (Block access to scripts)

Thanks,

Steve

0

Related:

  • No Related Posts

Download Insight Issue

I need a solution

I have a VBScript that stops a service, replaces the executable file, and starts the service.

when the script Starts the service, it activates “download insight” to allow the file, if the file has never been used as the service.

if I dont start the service I do not get prompted by insight to allow.

How do I get around this? is this a bug? I thought insight was based on browser downloads.

0

Related:

  • No Related Posts

Download Insight Bug?

I need a solution

I have a VBScript that stops a service, replaces the executable file, and starts the service.

when the script Starts the service, it activates “download insight” to allow the file, if the file has never been used as the service.

if I dont start the service I do not get prompted by insight to allow.

How do I get around this? is this a bug? I thought insight was based on browser downloads.

example:

  Set oFSO = CreateObject(“Scripting.FileSystemObject”)
  sCurPath = CreateObject(“Scripting.FileSystemObject”).GetAbsolutePathName(“.”)

  ServiceWasStarted = 0

  strComputer = “.”
  Set objWMIService = GetObject(“winmgmts:” _
      & “{impersonationLevel=impersonate}!\” & strComputer & “rootcimv2”)
  Set colServiceList = objWMIService.ExecQuery _
      (“Select * from Win32_Service where Name=’MyService'”)
  nItems = colServiceList.Count

  if nItems <= 0 then
‘            MsgBox(“Service is not Installed”)

  elseif oFSO.FileExists(sCurPath & “MyService.exe”) then

    For each objService in colServiceList
      if objService.State = “Running” then
        ServiceWasStarted = 1
        errReturn = objService.StopService()
      end if
    Next

    Wscript.Sleep 3000

    oFSO.GetFile(“MyNewService.exe”).Copy sCurPath & “MyService.exe”, True

    Wscript.Sleep 3000

    if ServiceWasStarted = 1 then
      For each objService in colServiceList
        errReturn = objService.StartService()
      Next
    end if
    
    MsgBox(“Complete”)
  end if

0

Related:

  • No Related Posts

Custom Inventory %userprofile%

I need a solution

Hi all,

i’ve a problem with a custom inventory.

I would like find is a string are in a file under %userprofileappdataLocalLow….

So i’ve created the custom dataclass, coded a vbs script that read this file and return 1 if it founds the string and 0 if it does not found the string.

It’s working but the script must be runned like “current logged user” (if i run the inventory like Local System Account the %userprofile% variable does not exist). With “Current Logged User” the custom sql table does not be popolate, i think because there are some permission missed.

Can you help me?

Thanks

0

Related:

  • No Related Posts