How to disable Windows Scripting Host for ASP.Net websites

Hi,

how can I disable WSH so no reference to the object can be made from ASP.NET-websites?

I have already tried:
- to change the ACL on c:\winnt\system\cscript.exe and wscript.exe so access for user ASPNET is denied
- to rename cscript.Exe and wscript.exe (but these files are automatically restored)

I don't want to disables WSH on the system (i need it for scripting purpose myself), but I should not be usable from websites of customers?

Anyone?

Thanks!
Tim.

 

 

 

 

Top