Security and Windows Script Host

 

Windows Script Host, which is a flexible tool for automating Windows, can also be misused by malicious developers.

To prevent abuse of Windows Script Host without stifling its power, Windows Script Host 5.6 employs a new security model.

Script users can now verify the authenticity of a script before running it. Script developers can sign their scripts to prevent unauthorized modifications. Administrators can enforce strict policies that determine which users have privileges to run scripts locally or remotely.

In This Section

CryptoAPI Tools

Signing a Script (Windows Script Host)

Software Restriction Policies

Signature Verification Policy

Verifying a Script

Reference (Windows Script Host)