AutoRun is the execution of a predetermined action when removable media is inserted into a computer. AutoRun can be triggered by CDs; DVDs; and USB storage devices.
So much nicer for an inserted DVD to autoplay on insertion to show the film, compared with opening the folder and looking for the correct file to click to run.
However, allowing CDs and other inserted media to AutoRun maybe considered a security threat. A CD, DVD or memory USB stick may have the expected video or music track replaced by a malware program. With Autorun enabled this will run once the media is inserted.
AutoRun maybe disabled either from the Settings menu, Registry or using Group Policy objects (GPO).
Disable AutoRun via the Settings Menu
This action is taken at the computer. Its easy to do and requires little understanding of the administration side of Windows. Chances of a serious error are minimal.
To turn off autorun using the administration settings begin by open the settings view. From the Windows start icon select settings.
Autoplay settings are within the devices settings. From the windows Settings view click on Devices. On the left menu is listed autoplay, click on this.
At the top turn off Use AutoPlay for all media and devices.
Whilst making the changes also set the default action for Removable drive and Memory card to Take no Action.
Control AutoRun with the Registry
To disable via the Registry add the entry NoDriveTypeAutorun to the key
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
If Explorer doesn’t exist add it as a new key.
The Dword options for NoDriveTypeAutorun are:
1 – To disable AutoRun on unknown drives
4 – To disable AutoRun on removable drives
8 – To disable AutoRun on fixed drives
10 – To disable AutoRun on network drives
20 – To disable AutoRun on CD-ROM drives
40 – To disable AutoRun on RAM disks
FF – To disable AutoRun on all drives
Don’t forget to take care when editing the Registry and consider making a backup first.
To access the Registry in Windows 10 in the search box on the taskbar type regedit. From the results select the entry for Registry Editor.
Alternatively right click on the start button and select Run. Enter regedit in the open box and select OK.
Control AutoRun with Group Policy
Group Policy can be used to configure whether Autorun is enabled.
In the start bar click on search and enter gpedit, selecting and clicking on gpedit.exe.
In the resulting window in the left hand menu expand
Computer Configuration > Administrative Templates > Windows Components > AutoPlay Policies
Double click on Set the default behaviour for AutoRun.
In the top left hand corner are three options:
- Not configured
- Enabled
- Disabled
Select Disabled and click on the Apply button in the bottom right hand corner. Followed by OK to close the popup window.
There are autorun options available under the Group Policy. The four available options with their setting are:
- Turn off autoplay: Enabled
- Prevent AutoPlay from remembering user choices: Enabled
- Disallow Autoplay for non-volume devices: Enabled
- Set the default behaviour for AutoRun: Disabled
