Autoplay or autorun is a feature that allows for devices to run a set of commands when inserted in a computer. From a securiy perspective, inserting CD/DVDs or plugging USB Flash Memory into a computer poses a significant risk. Malware and viruses can be propagated through autoplay/autorun.

This guide will help to disable the Autoplay policy by editing the Local Computer Policy. These setting can also be distributed through a GPO (Group Policy Object) in a Windows Domain.

 

The things you will need before starting:

  • A basic ability to navigate Microsoft Windows.
  • Access to an administrator account on your Desktop.
  • Basic knowledge of the System Registry (this should always be done with caution).

Steps:

  1. Click the Start Button
  2. Typing the word "gpedit.msc" in the search (Make sure to type the entire name as it will NOT appear until you have typed the entire program name.).
  3. Right click gpedit.msc and choose to "Run As administrator".
  4. Open and make certain to type in your administrator name and password at the prompt.
  5. Alternatively if you already operate as an administrator, you can press the WinButton + R or click Run in the Start Menu and proceed to type gpedit.msc inside the Run dialog box and then click Ok.
  6. Now, once inside of the Local Group Policy Editor, Navigate the folder structure to:
    Local Computer Policy\Computer Configuration\Administrative Templates\Windows Components\AutoPlay Policies
  7. In the right pane double-click or Right-click and then click edit the setting
    Turn off Autoplay
  8. Click the Radio button for "Enable" and then select from the available options below.
    CD-ROM and removable media drives (this setting is less volatile than "All drives")
  9. Click Apply and then OK
  10. In the right pane double-click or Right-click and then click edit the setting.
    Set the default behavior for AutoRun
  11. Click the Radio button for "Enable" and then select from the available options below.
    Do not execute any autorun commands
  12. You may now close the Local Group Policy Editor.

 

You have now disabled the Autoplay/autorun setting. Insert a USB Mass Storage device and notice that it should not popup a dialog box asking what you wish to do with the drive. This will help to protect your computer from autorun viruses and malware.