Microsoft Flip-Flops on Blocking Office Macros by Default

After causing some confusion, Microsoft is clarifying that it will still block macros by default in its Office programs—eventually.

The clarification arrived late on Friday after users noticed that Microsoft quietly backpedaled on its decision to automatically block the macros by default.

In an update, Microsoft wrote: “Following user feedback, we have rolled back this change temporarily while we make some additional changes to enhance usability. This is a temporary change, and we are fully committed to making the default change for all users.”

The statement signals that some customers have been complaining about Microsoft original’s plan to block Visual Basic Application-based macros by default, even though the change is meant to protect computers from malware.

Macros operate as programming codes that can automate a series of tasks with a single command. The problem is that hackers have long exploited macros as a way to trick users into downloading malware on their computers. This can be done by embedding macros in a malicious Office document, which can then be sent via email.

Microsoft has been aware of the threat. Years ago, the company introduced "Protected View," which adds a warning bar about the dangers of opening Office documents containing macros. But the warning bar can be easily be bypassed with one click. To block the macros by default, Microsoft left it up to IT administrators to turn the setting on.

In February, Redmond decided it would start blocking the macros automatically for Office files downloaded from the web. “For the protection of our customers, we need to make it more difficult to enable macros in files obtained from the internet,” the company said at the time.

:story: PC Magazine