Securityhome.eu

Hi,

How do i change the default autorun policies in windows?
So i doesn't run programs automatically from CD or USB.

Thanks

Hi,

It depends on which version of Windows you are using:

Windows XP
Disable through Windows Explorer

• Open My Computer or Explorer
  Right-click the CD-ROM drive or other drive and click Properties.
  Click the AutoPlay tab. Within this section you will be able to specify all Windows AutoPlay features

Windows Vista and Windows 7
You can change the autoplay settings in:
Start \ Control Panel \ Default Programs \ Change Autoplay settings


You can also disable autorun/autoplay completely:
A quick and easy way is by holding the SHIFT-key when inserting new media (CD,DVD, usb, ...)

If you have administrative rights on your computer, then you can disable AutoRun by modifying certain group policy keys. This can be done simply from the Group Policy Editor in Windows. Here is what you need to do:

1. Log in from an Administrator account.
2. Press Windows Logo key + R to bring up the Run dialog.
3. Enter gpedit.msc to launch the Group Policy Editor console.
4. The next step depends on your operating system.
   • Windows XP: From the Policy Tree on the left, expand Administrative Templates under Computer Configuration, and select System. Scroll down until you see the Turn Off AutoPlay/AutoRun item. Double click it, select Enabled and choose All Drives from the drop down menu below. Click Ok and close the Group Policy Editor.
   • Windows Vista/Windows 7: From the Policy Tree on the left, expand Administrative Templates under Computer Configuration, expand Windows Components, and select AutoPlay Policies. Double Click Turn Off AutoPlay/AutoRun item. Select Enabled and choose All Drives from the drop down menu below. Click Ok and double click Default Behavior for AutoRun. Select Enabled and choose Do not Execute Any AutoRun Commands from the options menu. Click Ok and close the Group Policy Editor
   .
5. Press Windows Logo Key + R again to bring up the run dialog.
6. Enter gpupdate.exe /force to force the Group Policy Changes without restarting your computer.

Hopes his helps.

Thanks