Chapter 24. Scripting Security
IN THIS CHAPTER
- Why Scripting Can Be Dangerous
- Security Improvements in Windows XP and Windows Server 2003
- Digitally Signing Scripts
- Running Only Signed Scripts
- Ways to Implement Safe Scripting
Scripting has two primary security issues associated with it. First, the Windows Script Host (WSH) is included with just about every version of Windows since Windows 98. Second, WSH associates itself with a number of filename extensions, making it very easy for users to click an email file attachment and launch unauthorized scripts. The knee-jerk reaction of many administrators is to simply disable scripting altogether, which also removes a beneficial administrative tool from the environment. In this chapter, I’ll focus ...