Sunday, March 7, 2010

Disable Autorun with Group Policy Editor

If you are a geek type and want to do it the hard way we could use the GPEDIT.MSC tool to disable Autorun. GPEDIT.MSC does not work on Windows Home Edition, only on Windows XP.

1. Navigate to Start -> Run

2. type GPEDIT.MSC

3. Click OK

4. Navigate to Local Computer Policy -> Computer Configuration -> Administrative Template -> System

5. Double click Turn Off Autoplay

6. Select Enabled from the radio buttons

7. On the Turn off autoplay dropdown box select All drives

8. Click OK button, Close Group Policy Editor

Disable Autorun with the Registry Editor

If you are using Windows Home, you can disable autorun using the registry editor.

1. Navigate to Start -> Run

2. type REGEDIT, click OK button

3. Navigate to HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> CDROM

4. Double Click on Autorun

5. Change from 1 to 0. The default value 1 means autorun is enabled on CDROM

6. Navigate to HKEY_CURRENT_USER -> Software -> Microsoft -> Windows -> CurrentVersion -> Policies -> Explorer

7. Double click on NoDriveTypeAutoRun

8. Change the current valut to B5 in Hex. This disables CDROMs and USB drives

To disable other devices refer to the table below.

Value Meaning

0x1 Disables Autoplay on drives of unknown type.

0x4 Disables Autoplay on removable drives.

0x8 Disables Autoplay on fixed drives.

0x10 Disables Autoplay on network drives.

0x20 Disables Autoplay on CD-ROM drives.

0x40 Disables Autoplay on RAM disks.

0x80 Disables Autoplay on drives of unknown type.

0xFF Disables Autoplay on all types of drives.

By default, Autoplay is disabled on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives. The default value 0x95 (149) is the sum of 0x1, 0x80 (unknown types), 0x4 (floppy drives), and 0x10 (network drives). 0xB5 is the sum of 0x1, 0x4, 0x10, 0x20 and 0x80. B5 in Hex or 181 in Decimal.

Comment from Krishan

Create a file call "autorun.reg" and copy the text below and paste into that file

---- Start here ---

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] "NoDriveTypeAutoRun"=dword:000000ff

---- End here ----

Save the file and double click to import the registry setting to disable the autorun for all drive

Hot Disable Autorun

There is actually a more easier way to disable autorun without doing these complex instructions by doing a hot disable. Hot disable meaning, you only disable them at the time you insert your USB device. Recommended if your the only one using your PC because others may not know it.

To hot disable your USB drive:

Hold down Shift key while inserting your USB device.


Post a Comment