Control: ism-1491; Revision: 3; Updated: Mar-22; Applicability: ALL; Essential Eight: N/A ​

Unprivileged users are prevented from running script execution engines, including:

• Windows Script Host (cscript.exe and wscript.exe)
• PowerShell (powershell.exe, powershell_ise.exe and pwsh.exe)
• Command Prompt (cmd.exe)
• Windows Management Instrumentation (wmic.exe)
• Microsoft Hypertext Markup Language (HTML) Application Host (mshta.exe).