Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
General Security Discussions
Windows script host
Message
<blockquote data-quote="Andy Ful" data-source="post: 788539" data-attributes="member: 32260"><p>The below reg tweak:</p><p>[CODE]reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f[/CODE]</p><p>seems to work for both 32-bit and 64-bit Windows (not system wide), and why the same does not work in the HKLM key (system wide) is a sweet Microsoft mystery.<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle :giggle:" loading="lazy" data-shortname=":giggle:" /></p><p>The below policy reg tweaks will work only on Administrator type of account (not on Standard User Account):</p><p>[CODE]reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f</p><p>reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "wscript.exe" /f</p><p>reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "cscript.exe" /f[/CODE]</p><p>They should block running scripts from Windows Explorer for the particular user (not system wide), but will not block scripts run from the command prompt:</p><p>[CODE]cmd /c wscript.exe c:\z\hello.wsf[/CODE]</p><p>On Standard User Account the similar reg tweaks must be done in the proper HKU hive. Generally Windows policies on SUA cannot be applied via reg tweaks in the HKCU hive.</p><p></p><p>The Symantec tool (<a href="http://www.symantec.com/avcenter/noscript.exe" target="_blank">http://www.symantec.com/avcenter/noscript.exe</a>) changes only file associations (has to be run as administrator).</p></blockquote><p></p>
[QUOTE="Andy Ful, post: 788539, member: 32260"] The below reg tweak: [CODE]reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f[/CODE] seems to work for both 32-bit and 64-bit Windows (not system wide), and why the same does not work in the HKLM key (system wide) is a sweet Microsoft mystery.:giggle: The below policy reg tweaks will work only on Administrator type of account (not on Standard User Account): [CODE]reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "wscript.exe" /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "cscript.exe" /f[/CODE] They should block running scripts from Windows Explorer for the particular user (not system wide), but will not block scripts run from the command prompt: [CODE]cmd /c wscript.exe c:\z\hello.wsf[/CODE] On Standard User Account the similar reg tweaks must be done in the proper HKU hive. Generally Windows policies on SUA cannot be applied via reg tweaks in the HKCU hive. The Symantec tool ([URL]http://www.symantec.com/avcenter/noscript.exe[/URL]) changes only file associations (has to be run as administrator). [/QUOTE]
Insert quotes…
Verification
Post reply
Top