Deny to run any VBS

[admin]

I am running a Group police on my active directory
how can I deny to run any .VBS program on any local machine?

 

[Kidem-portem]

i found this ,hope it helps
WSH is normally installed. In order to stop it from running you have to
disassociate the VBS extension with the WSH. Log on as an administrator.
Right click "My Computer" on the Desktop or in Windows Explorer. Select
"Open." Click on the "View" menu and select "Options...." Now click on the
"File Types" tab. Scroll down to "VBScript Script File" (if not found stop
here and cancel out; you don't have scripting active). Click on the
"VBScript Script File" and select "Remove." Confirm and then quit the File
Types application.

 

[Arild Bakken]

I am running a Group police on my active directory
how can I deny to run any .VBS program on any local machine?

You could use the "Don't run specified Windows applications" (User
configuration / Administrative Templates / System) and add the WScript.exe
and CScript.exe applications to that list.


Arild

 

[admin]

thanks for your help,
but let me tell you what is happen, some one rename the Wscript.exe to
another name and run the VBS
program, do you have any addional soluation?

 

[Arild Bakken]

thanks for your help,
but let me tell you what is happen, some one rename the Wscript.exe to
another name and run the VBS
program, do you have any addional soluation?

That is always a problem, and you can't get around it. For a Windows
Terminal Server you could use the AppSec tool, but I'm not sure if you can
use it on regular computers or other types of servers. Look at PSS article:
320181


Arild