We have "Executing scripts by Windows script host (CScript.exe or Wscript.exe) from common user folders" rule enabled to BLOCK in our domain and works great. Maybe too great. There seems to be one script that runs from the temp folders that is part of GDRIVE desktop app and when blocks, its throwing one of those ominous critical windows errors pop ups to the user.
Would there be a way to avoid this without disabling the block altogether? It looks to me that the exclusions screen is for executables rather than destination file executed... so not sure what options do i have here. We are n ENS 10.5.2
the invisible.vbs is upgrade script.. so only will run when google drive is updating or checking for new version.. we had same issue and just ignored it since not allot of people is using google.drive..
Right, we are aware of those facts but we can't really ignore since we use G-suite in our corporation. Gdrive is one of the products....