How to disable autorun in Windows XP

With all these nasty worms going wild nowadays disabling autorun becomes a must-have decision. It’s all mainly because of USB flash drives getting infected with bunch of stuff. Not a big deal for office environment because no one should have administrative rights, however, in a home environment, where PCs are usually shipped with admin rights granted by default, people get into a mess almost immediately. Anyways, here is what I do to disable autorun in AD environment.

On your domain controller launch Active Directory Users and Computers:

Right-click domain name and select Properties:

Go to Group Policy tab, select Default Domain Policy and click on Edit:

Under Computer Configuration section go to Administrative Templates -> System. Double-click on Turn off Autoplay option at the right pane:

Check Enabled and select All drives from drop-down menu. Click on OK button when done.

That’s it. Same technique applies when you do changes on a standalone PC in non-AD environment. In this case you edit Group Policy by launching gpedit.msc from command prompt.

Tags: , , , , ,

2 Responses to “How to disable autorun in Windows XP”

  1. Carlos says:

    Just to say thank you, your post has helped me to do exactlly that in my working enviroment, you saved a headhache looking for that option.

    One question i have:
    Do you know how to personalize the login window, so it will say something like welcome to my party, by login you accept our IT policy username password. Or maybe something like a previous window that users have to click acceptting the rules of engagement alias company’s IT policy

  2. r00t says:

    Carlos, I don’t think you can modify the logon window, however, you can add a disclaimer-type popup message by going to Default Domain Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options. Look for Interactive logon: Message text… and Interactive logon: Message title…

Leave a Reply