Stop users from running .vbs

[marc2510]

ive had a search and no real solution was found so i thought id give it a try.

 

if someone would do me the favour of testing it.

 

best place i could think of putting it would be the logon script

 

Cheers

disable vbs.zip

[apeo]

Cant you just use GPO to stop vbs files from running or any file (eg cmd, bat, exe etc), and why cant you test it?

[marc2510]

When i mean test i mean try beat the fix!

 

ive tried a few things but i feel it does what its spose to do, just making sure i have not missed anything

 

Thanks

[apeo]

Just wondered why configuring it via GPO isnt sufficient?

[srochford]

As far as I can see, that will stop my double clicking a .vbs file but it won't stopping me shelling to "cscript xxx.vbs"?

 

It also doesn't seem to stop me from right clicking and then picking "open with cscript"

 

If you really want to stop vbscripts from running I think you need to block cscript and wscript

[marc2510]

Just wondered why configuring it via GPO isnt sufficient?

 

them main reason i have done this was for 20 xp home senco netbooks we have that go home to pupils.

 

so your right i can do gpo for domain clients

[apeo]

them main reason i have done this was for 20 xp home senco netbooks we have that go home to pupils.

 

so your right i can do gpo for domain clients

 

Ah i see, sorry for the questions.. didnt mean be an inquisition, i was just interest to know the circumstances.

[srochford]

OK; in that case you don't need to worry about things like login scripts not working so I would just block the scripting host stuff:

 

cacls %windir%\system32\cscript.exe /r users
cacls %windir%\system32\wscript.exe /r users

[marc2510]

OK; in that case you don't need to worry about things like login scripts not working so I would just block the scripting host stuff:

 

cacls %windir%\system32\cscript.exe /r users
cacls %windir%\system32\wscript.exe /r users

 

perfect thanks

[mac_shinobi]

 

If you really want to stop vbscripts from running I think you need to block cscript and wscript

 

I was just thinking that - obviously very late to the party lol