Autoplay or autorun is a feature that allows for devices to run a set of commands when inserted in a computer. From a securiy perspective, inserting CD/DVDs or plugging USB Flash Memory into a computer poses a significant risk. Malware and viruses can be propagated through autoplay/autorun.
This guide will help to disable the Autoplay policy by editing the Local Computer Policy. These setting can also be distributed through a GPO (Group Policy Object) in a Windows Domain.
The things you will need before starting:
- A basic ability to navigate Microsoft Windows.
- Access to an administrator account on your Desktop.
- Basic knowledge of the System Registry (this should always be done with caution).
Steps:
- Click the Start Button
- Typing the word "gpedit.msc" in the search (Make sure to type the entire name as it will NOT appear until you have typed the entire program name.).
- Right click gpedit.msc and choose to "Run As administrator".
- Open and make certain to type in your administrator name and password at the prompt.
- Alternatively if you already operate as an administrator, you can press the WinButton + R or click Run in the Start Menu and proceed to type gpedit.msc inside the Run dialog box and then click Ok.
- Now, once inside of the Local Group Policy Editor, Navigate the folder structure to:
Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\AutoPlay Policies - In the right pane double-click or Right-click and then click edit the setting
Turn off Autoplay - Click the Radio button for "Enable" and then select from the available options below.
CD-ROM and removable media drives(this setting is less volatile than "All drives") - Click Apply and then OK
- In the right pane double-click or Right-click and then click edit the setting.
Set the default behavior for AutoRun - Click the Radio button for "Enable" and then select from the available options below.
Do not execute any autorun commands - You may now close the Local Group Policy Editor.
You have now disabled the Autoplay/autorun setting. Insert a USB Mass Storage device and notice that it should not popup a dialog box asking what you wish to do with the drive. This will help to protect your computer from autorun viruses and malware.