Chapter 28. Scripting Security

IN THIS CHAPTER

Chances are that you've had to completely disable scripts in your environment, thanks to the number of abusive scripts out there. Making scripting a safe part of your environment can be difficult, so in this chapter, I'll give you some pointers for doing so.

Scripting has two primary security issues associated with it. First, the Windows Script Host (WSH) is included with just about every version of Windows since Windows 98. Second, WSH associates itself with a number of filename extensions, making it very easy for users to click an e-mail file attachment and launch unauthorized scripts. The knee-jerk reaction of many administrators is to simply disable scripting altogether, which also removes a beneficial administrative tool from the environment. In this chapter, I'll focus on ways to address the two primary security issues associated with scripting, helping you to configure a safer scripting environment.