benjabrahamson

@mrcrazy04 Thanks, that's a really useful link

Late to the thread but: It's probably best to block scripts too, since users could run commands using notepad (and saving as a .bat file). I believe powershell has a feature where only signed scripts can be executed, so perhaps block all except them, and sign your administrative scripts?