Solved Why do I get this blocked VBS file error?

atinfo · Jun 25, 2023

Why do I get this error? :think:

I didn't have this problem before and didn't change any group policy option regarding vbs.

Brink · Jun 25, 2023

If you like, you could use the BAT below to rebuild the icon cache instead.

Rebuild Icon Cache in Windows 11

This tutorial will show you how to rebuild the icon cache to clear and reset it for your account in Windows 10 and Windows 11. The icons that display for files in Windows are saved in an icon cache so they can be displayed quickly instead of having to manually scan and slowly load them each...

www.elevenforum.com

atinfo · Jun 26, 2023

Brink said:
If you like, you could use the BAT below to rebuild the icon cache instead.

Rebuild Icon Cache in Windows 11

This tutorial will show you how to rebuild the icon cache to clear and reset it for your account in Windows 10 and Windows 11. The icons that display for files in Windows are saved in an icon cache so they can be displayed quickly instead of having to manually scan and slowly load them each...

www.elevenforum.com

I have this (your) BAT. It doesn't work for some icons (like pinned icons in Start Menu). The VBS is better, I don't know the technical difference.

LesFerch said:
Something must have changed. Have you checked the policy setting using gpedit.msc?

Computer Configuration > Administrative Templates > Windows Components > Windows Script Host

Setting: Turn off Windows Script Host

LesFerch said:
Also, what AV software are you running? Was there any change recently?

Microsoft Windows Security.

Bizarre · Jun 26, 2023

Try running the script as Administrator. If that doesn't work, open Group Policy Editor and go to Computer Configuration > Windows Settings > Security Settings > Application Control Policies > App Locker > Script Rules. Check if you have the rules below:

When I first updated to 22H2 via in-place upgrade, I was having trouble running scripts as well.
As it turns out, any unrecognized script (not signed by MS) will not be allowed to run if there are no rules in place.
To create the rules, click Action menu > Create Default Rules.

atinfo · Jun 26, 2023

What the hell is going on there!!! Why the language is Russian!!! I have nothing to do with Russia in my system! Why has Putin invaded my Script Security territory??!!

Translated version (!):

My languages (!):

Bizarre said:
When I first updated to 22H2 via in-place upgrade, I was having trouble running scripts as well.
As it turns out, any unrecognized script (not signed by MS) will not be allowed to run if there are no rules in place.
To create the rules, click Action menu > Create Default Rules.

I didn't have this problem on 22H1. I think MS has changed some security policies for VBS in 22H2. I realized if I copy the script on my Desktop, it runs without any problem! :think:

atinfo · Jun 26, 2023

It was all about "Run as Admin" (even run from Drive D)!

LesFerch · Jun 26, 2023

I finally replicated your issue and figured out what needs to be changed. And sorry about that incorrect GPEdit path. I didn't have a Windows Pro system set up at the time to verify it. That just goes to show you can't be sure about any instructions found on the Internet until verified.

The GPEdit path @Bizarre provided is the correct one. The entries shown in that post are the ones you get if you right-click and select "Create default rules". When those rules are applied, you see the behavior you described. That is, a script launched normally will be blocked with the policy error message you posted, but scripts can still be run elevated (i.e. "Run as administrator").

Your rule set looks different (and in Russian too). I can't explain that, but the fix is the same regardless.

If you want to be able to run scripts, without having to select "Run as administrator", then simply select all of the rules under "Script Rules", right-click, and select Delete.

atinfo · Jun 26, 2023

A translated version of my GPEdit (OCR translation)

atinfo said:
View attachment 63333

Can you understand anything? Is this normal?! I didn't change anything.

But more than the Script problem, I am very concerned about Russian! The only app I have installed from Russia is Telegram (Pavel Valeryevich Durov, Putin's right hand :woozy:

) downloaded from Microsoft Store.

atinfo · Jun 26, 2023

Found out (why it runs without Admin right on C drive/Desktop). The rules say if the script is in the OS drive has permission to Run!

LesFerch · Jun 26, 2023

atinfo said:
A translated version of my GPEdit (OCR translation)

Can you understand anything? Is this normal?! I didn't change anything.

But more than the Script problem, I am very concerned about Russian! The only app I have installed from Russia is Telegram (Pavel Valeryevich Durov, Putin's right hand ) downloaded from Microsoft Store.

The text in those fields can be edited, so you could have just copied the text and pasted into Google Translate, like I did to translate in the other direction:

All scripts located in the Program Files folder
Все скрипты находятся в папке Program Files

The Russian text on your machine is the same, but with the additional "(default rule)" bit. I'm leaning towards harmless, but I can't explain why those entries were created (I don't have them on my Windows 11 Pro VM), let alone why they're in Russian. One theory is that you trialed Kaspersky security software at one point and it created those entries and entered it's own descriptions. But, I tested Kaspersky Free and no entries were created. And Telegram doesn't seem a likely source. I installed it and, again, it didn't add any policies.

I would just delete the entries and then check back once in a while to see if they ever get recreated.

LesFerch · Jun 26, 2023

Bizarre said:
When I first updated to 22H2 via in-place upgrade, I was having trouble running scripts as well.
As it turns out, any unrecognized script (not signed by MS) will not be allowed to run if there are no rules in place.
To create the rules, click Action menu > Create Default Rules.

That's very strange. Normally, no rules are in place there and all scripts run just fine from pretty much anywhere.

Since you've probably had a few updates in the meantime, I suggest removing those rules and see if normal behavior has returned.

LesFerch · Jun 26, 2023

@Bizarre and @atinfo...

Also note that, when those entries are in place, PowerShell scripts run in Constrained Language Mode, unless you elevate them via "Run as administrator".

atinfo · Jun 27, 2023

LesFerch said:
The text in those fields can be edited, so you could have just copied the text and pasted into Google Translate, like I did to translate in the other direction:

I am a bit lazy! Just press Win+Shift+S and drag the SS into the OCR translator box!

LesFerch said:
The Russian text on your machine is the same, but with the additional "(default rule)" bit. I'm leaning towards harmless, but I can't explain why those entries were created (I don't have them on my Windows 11 Pro VM), let alone why they're in Russian. One theory is that you trialed Kaspersky security software at one point and it created those entries and entered it's own descriptions. But, I tested Kaspersky Free and no entries were created. And Telegram doesn't seem a likely source. I installed it and, again, it didn't add any policies.

Thanks

. I don't have any Russian apps installed on my system (I hate KS!). The only antivirus and browsers I am using are Windows Security and Edge. I rarely install 3rd party apps. My installed apps list:
7z
NP++
Office 2021
Adobe Family!

The only thing I am suspicious of is a Realtek audio driver was installed on my system, and I realized it was a miner from Russia!

Putin... :woozy:

I gave you a drone you sent me a spy :nope:

... !!
Just call me and tell me that you have a low budget. I would send you a tanker! Why mining?!

LesFerch said:
I would just delete the entries and then check back once in a while to see if they ever get recreated.

Is it safe to delete those entries (security talking)?

LesFerch · Jun 27, 2023

atinfo said:
I am a bit lazy! Just press Win+Shift+S and drag the SS into the OCR translator box!

For me, Win+Shift+S brings up the Snipping Tool, but I don't see an OCR option. Add-on perhaps? PowerToys? I'd still go with copy and paste to Translate, rather than depend on translating from a bitmap, but it's cool that you can do OCR that easily.

atinfo said:
Is it safe to delete those entries (security talking)?

Those entries aren't there by default when you build a new Windows 11 Pro machine, so I would certainly remove them.

I think their "benefit" is for naïve users who might download and double-click a VBS or JS script attached to an email. But if the user is that naïve, and the email told them to right-click and select "Run as administrator", they probably would do that anyhow.

Also, with those entries present, at some point, it could make you tear your hair out if you're getting errors with a PowerShell script due to it running in Constrained Language Mode.

atinfo · Jun 27, 2023

LesFerch said:
For me, Win+Shift+S brings up the Snipping Tool, but I don't see an OCR option. Add-on perhaps? PowerToys? I'd still go with copy and paste to Translate, rather than depend on translating from a bitmap, but it's cool that you can do OCR that easily.

Just to clarify how I do it!
1- Set "Automatically save screenshots" to on (in ST=Snipping tool).

2- Select "Window Mode" (in ST).

3- Press Win+Shift+S and hover your mouse on the GPEdit window and press the left mouse button (it automatically takes a SS and saves it on the Desktop)
4- Drag it (SS) from the Desktop into the OCR box!

I don't need to do #1 and #2 because I always set it on (#1), I almost always use #2 mode, and ST remembers my last settings. I have only #3 and #4!

LesFerch · Jun 27, 2023

atinfo said:
4- Drag it (SS) from the Desktop into the OCR box!

Uh huh! The missing bit for me was that "OCR box" means "Yandex".

atinfo · Jun 28, 2023

I thought you knew it :woozy:

. The best OCR translator that can translate Russian to English is Yandex... :yawn:

atinfo · Oct 11, 2023

Does this mean that I am unable to use the script (RebuildIconCache.vbs) any longer? :think:

Deprecated features in the Windows client

Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11.

learn.microsoft.com

Brink · Oct 11, 2023

atinfo said:
View attachment 73832
Does this mean that I am unable to use the script (RebuildIconCache.vbs) any longer?

Deprecated features in the Windows client

Review the list of features that Microsoft is no longer actively developing in Windows 10 and Windows 11.

learn.microsoft.com

You can after installing the VBScript feature if needed.

Install or Uninstall VBScript Feature in Windows 11

This tutorial will show you how to install or uninstall the VBScript optional feature for all users in Windows 11. A .vbs file is a Virtual Basic script written in the VBScript scripting language. It contains code that can be executed within Windows via the Windows-based script host...

www.elevenforum.com

LesFerch · Oct 11, 2023

atinfo said:
Does this mean that I am unable to use the script (RebuildIconCache.vbs) any longer?

No. It just means that VBScript is a technology on the way out. It will remain installed in Windows for a long time yet. The first change you will see is that there will be an option to remove VBScript in Settings (we've already seen this in the Canary build). Just don't remove it and you won't have any issue.

In the future (exact year unknown), VBScript will not be installed by default, but you will still be able to add it back with a simple click in that same Settings screen.

Further in the future (number of years again unknown) VBScript may be removed altogether with no option to add it back. That's too far away to be worried about it.

Solved Why do I get this blocked VBS file error?

Well-known member

My Computer

Administrator

My Computers

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

​

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Well-known member

My Computer

Administrator

My Computers

Well-known member

My Computer

Similar threads