With Windows 10, version 1709 (RS3, build 16299) or greater you can set up an ASR rule to block JavaScript and VBScript. To set up ASR rules, you can use a variety of methods.