JSI Tip 2409. How can I restrict users from using Windows Scripting Host?

The Windows Scripting Host (WSH) can be run from either the Windows-based host (Wscript.exe), or the command-shell-based host (Cscript.exe).

The easiest way to restrict usage is to set restrictive ACLs on these executables.