I've had to support an app that: 1) only ran in MSIE 2) required the domain policy to permit VBScript 3) required permission to launch + invoke local COM/app

I've had to support an app that: 1) only ran in MSIE 2) required the domain policy to permit VBScript 3) required permission to launch + invoke local COM/applications 4) served over http:// http:// All just so they could direct MSWord to directly print the server-side generated Sales Order template. I audibly gasped and asked if they knew this put our systems at extreme risk, and the tech talking me through it basically shrugged "it's how it works" Thankfully that webapp 'upgraded' years ago so that's no longer how it's done, but when it's the only way to get orders into your business from one of your top 10 customers, you just setup a workstation to do it :(