Turn off unused features or restrict access to scripting engines such as VBScript or scriptable administration frameworks such as PowerShell.