How to disable the scripting extension in ActiveDirectory? (4362766)

When Change Auditor is deployed to Exchange Server，it automatically enables the scripting extension in Active Directory.

What does Enables the scripting extension in Active Directory actually do?

How to disable the scripting extension?

The Scripting Agents are required for Change Auditor to extend its access to the Exchange structure

If the Exchange Scripting Agent is not enabled, Exchange event data resulting from executing Exchange cmdlets in the Exchange Management Shell, by Exchange services, in Exchange Management Console or the Exchange Control Panel will not be recorded

Before attempting to disable the Scripting Agents, it is important to uninstall all the Change Auditor Agents first from all Exchange Servers

If one Agent remains or restart, it will re-enable the Scripting Agents

To enable or disable the Scripting Agent, please see the following commands:

Note: Scripting Agent is forest-wide setting which can be enabled/disabled via PowerShell:

Scripting Agent commands

1. Check Scripting Agent Status
   • Get-CmdletExtensionAgent | ft name, priority, enabled -wrap -autosize
2. Enable Scripting Agent
   • Enable-CmdletExtensionAgent “Scripting Agent”
3. Disable Scripting Agent
   • Disable-CmdletExtensionAgent “Scripting Agent”