← Back
VBScript deprecation: Detection strategies for Windows
MC1075649 · build prod-20251231-200323
Category
planForChange
Severity
normal
Major change
False
Last modified
2025-05-16 17:04:14
Summary source
Azure OpenAI (gpt-4.1)
Action by (Graph)
Action by (AI)
Services
Windows
Tags
Admin impact
Master tags
Roadmap IDs

One-line summary

Admins should detect and migrate away from VBScript, as it is enabled by default on Windows 11 24H2 and will be disabled/removed in future deprecation phases.

Similar updates

More like this
MC1138549 Hotpatch readiness: Enable VBS at scale
Hotpatch readiness: Enable VBS at scale To use Windows Autopatch hotpatching (security updates without restart), you must enable virtualization-based security (VBS) on Windows clients using Intune, PowerShell, or Command Prompt. Prepare for hotpatch in your environment by meeting a key requirement to enable virtualization-based security (VBS) on.
MC1153657 Windows Management Instrumentation Command-line (WMIC) removal from Windows
Windows Management Instrumentation Command-line (WMIC) removal from Windows WMIC will be removed in Windows 11 version 25H2 and later; use PowerShell or modern tools for management tasks previously done with WMIC. Windows Management Instrumentation Command-line (WMIC) tool will be removed when upgrading to Windows 11, version 25H2. All later.
MC1179067 Policy-based removal of pre-installed Microsoft Store apps
Policy-based removal of pre-installed Microsoft Store apps Admins can now remove select pre-installed Microsoft Store apps on Windows 11 Enterprise/Education 25H2 using a new policy, configurable via Intune or Group Policy. You’re now more in control of provisioned Microsoft Store apps than ever. Starting this month, you can remove select in-box.
MC1133898 PowerShell 2.0 removal in Windows
PowerShell 2.0 removal in Windows Windows PowerShell 2.0 will be removed from Windows 11 (24H2) in August 2025 and Windows Server 2025 in September 2025; update legacy scripts to newer PowerShell versions. Windows PowerShell 2.0 is removed from Windows 11, version 24H2 starting with the August 2025 non-security update. PowerShell 5.x introduced.
MC1182678 Feature updates Policy Change: Deprecating Option for Windows 10 Feature Updates on Devices Ineligible for Windows 11
Feature updates Policy Change: Deprecating Option for Windows 10 Feature Updates on Devices Ineligible for Windows 11 Intune's option to install latest Windows 10 feature updates on devices ineligible for Windows 11 will be retired, starting February 17, 2026, affecting both UI and Graph API controls. We’re retiring the “When a device isn't.
MC1186368 Microsoft SharePoint: Update to custom scripting governance in App Catalog site
Microsoft SharePoint: Update to custom scripting governance in App Catalog site Custom scripting will be disabled by default on SharePoint Online App Catalog sites starting mid-January 2026 to enhance security; app operations remain unaffected. To strengthen security and reduce the risk of ungoverned scripting, Microsoft is expanding the custom.

Details

Body (from Message Center)

Start detecting Visual Basic Scripting Edition (VBScript) across your organization in preparation for the next deprecation phase. See how to use System Monitor (Sysmon), review VBScript dependencies, or scan for .vbs files and custom MSI packages. Once detected, you should proactively migrate away from VBScript. Now that VBScript is enabled by default on Windows 11, version 24H2 and later, you can also proactively disable it in preparation for the next deprecation phase.
 
When will this happen:
Currently, VBScript is in its first deprecation phase, available as features on demand (FODs) and enabled by default on Windows 11, version 24H2. It’s the best time to research and migrate to alternatives. Today’s blog article is available to help with this transition. In the future, VBScript FODs will be disabled by default and later removed from Windows.
 
How this will affect your organization:
If your organization relies on VBScript, you’ll need to identify and remediate it before the next deprecation phase. There are several ways to identify where and how vbscript.dll is still being used within your enterprise environment. The four strategies outlined in the new article are here to help you with this task.
 
What you need to do to prepare:
Choose one of the following strategies to detect VBScript across your organization:
  • Use Sysmon to monitor VBScript usage.
  • Review VBScript dependencies.
  • Scan for .vbs files across the system.
  • Scan custom MSI packages for embedded VBScript.
Once detected, proactively migrate away from VBScript and disable VBScript on Windows 11, version 24H2 and later. Read Additional information for details.
 
Additional information:

Raw JSON (for debugging)

Expand/collapse the full payload below.
Show/hide raw
{
  "snapshot_item": {
    "action_required_by": null,
    "ai_action_required_by": null,
    "ai_actions": [
      "Detect VBScript usage via Sysmon or file scans",
      "Review and remediate VBScript dependencies",
      "Migrate scripts to alternatives",
      "Disable VBScript on Windows 11 24H2+"
    ],
    "ai_master_tags": [],
    "ai_model": "gpt-4.1",
    "ai_summary": "Admins should detect and migrate away from VBScript, as it is enabled by default on Windows 11 24H2 and will be disabled/removed in future deprecation phases.",
    "ai_topics": [
      "Windows"
    ],
    "category": "planForChange",
    "details_map": {},
    "id": "MC1075649",
    "importance": 1,
    "is_major_change": false,
    "last_modified": "2025-05-16T17:04:14Z",
    "ms_products": [
      "Windows"
    ],
    "platforms": null,
    "roadmap_ids": [],
    "services": [
      "Windows"
    ],
    "severity": "normal",
    "tags": [
      "Admin impact"
    ],
    "title": "VBScript deprecation: Detection strategies for Windows"
  }
}