Disable Windows Script Host
Blocks .vbs and .js scripts from running with wscript/cscript.
Applying it needs Nexus Standard or Pro. Every plan can read it here and undo it in Restore Center. Compare plans
What it changes
HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings\Enabled = 0
Before anything is written, the review screen shows this setting's current value on your PC next to the new one.
Why it helps
Blocks a common malware delivery method (script attachments).
Trade-offs
Some old installers, login scripts and admin tools that use VBScript stop working.
Evidence
Strong evidence means: documented by microsoft or consistently measurable. Expected impact is small (1 of 3): how much it can matter when this is actually the bottleneck on your PC, not a promised gain.
Is it in a pack?
No. Packs only contain Safe tweaks, and this one is labelled Caution.
How to undo
Switch the tweak off in Nexus, or open Restore Center and restore this change (or choose Undo last change). Nexus writes back the original value it recorded before applying, not a generic default, then reads it back to confirm.
More in Security hardening
- Turn off AutoRun for all drivesStops programs starting automatically from inserted USB drives and discs.SafeSecurityRecommended
- Turn off AutoPlayStops Windows asking what to do with inserted media and devices.SafeSecurity
- Turn off LLMNRDisables Link-Local Multicast Name Resolution.SafeSecurity
- Turn off smart multi-homed name resolutionStops DNS queries being sent over every network adapter at once.SafeSecurity
- Disable the SMBv1 serverTurns off the obsolete SMB1 file-sharing server protocol.SafeSecurityRecommended
- Turn off Remote AssistanceStops this PC accepting Remote Assistance invitations.SafeSecurityRecommended