Timeline for Windows - How to restrict access to VBScript.dll and JScript.dll?
Current License: CC BY-SA 4.0
10 events
when toggle format | what | by | license | comment | |
---|---|---|---|---|---|
Apr 17, 2019 at 12:39 | vote | accept | RealDrGordonFreeman | ||
Mar 21, 2019 at 12:48 | comment | added | Crumblez | I suggest making a standard non priv'd user account and try to run VBS. If you can, then the DLL is not blocked appropriately - that is if you restricted VBS to only domain admins. | |
Mar 20, 2019 at 21:03 | comment | added | RealDrGordonFreeman | Okay. I've given your answer a try. Now searching for a good way to test if it functions as intended. | |
Mar 20, 2019 at 20:15 | history | edited | schroeder♦ | CC BY-SA 4.0 |
added 10 characters in body
|
Mar 20, 2019 at 14:22 | comment | added | Crumblez | You can restrict non administrative users from accessing the VBScript.dll file. Standard users on the floor would not be administrators and so would not be able to access the VBS dll. | |
Mar 20, 2019 at 13:53 | comment | added | RealDrGordonFreeman | Very uncertain how restricting user groups would impact normal browsing behaviors, and, how effective this method is. Any additional info is welcome. | |
Mar 20, 2019 at 13:41 | comment | added | Crumblez | Edited to reflect the DLL rule - thanks. | |
Mar 20, 2019 at 13:41 | history | edited | Crumblez | CC BY-SA 4.0 |
added 195 characters in body
|
Mar 20, 2019 at 13:36 | comment | added | Polynomial | For DLLs you can't use the normal AppLocker rules. You need a DLL rule. | |
Mar 20, 2019 at 13:10 | history | answered | Crumblez | CC BY-SA 4.0 |