you might be looking for...
ExecWait '"cscript" nopwdexp.vbs //B /domain:%computername% /user:master'
Basically, the outer ' quotes define the string for ExecWait to execute, while the inner " quotes are only there in case cscript were not just that command, but the command with full path - and the path might have spaces in it. Everything after that is the parameters (any spaces in -that- would have to be handled by the application's own spaces-in-parameters handling, which may or may not affect which quote marks you can use.