GPO policy: "Turn off AutoPlay" / NoAutoRun registry value that disables the AutoRun INF processing. Controls whether Windows executes autorun.inf files when removable media is inserted. Registry: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer:NoAutorun (REG_DWORD). CIS Benchmark (L1) recommends value 1 (disable AutoRun) in conjunction with NoDriveTypeAutoRun to fully mitigate AutoRun-based malware propagation. Reference: Policy CSP - Autoplay (TurnOffAutoPlay)
Values
| Enum Value | Description |
|---|---|
|
|
AutoRun not disabled by this value (registry value 0 or absent). AutoRun default behavior applies; autorun.inf processing depends on the NoDriveTypeAutoRun setting. |
|
|
AutoRun disabled (registry value 1). Prevents execution of autorun.inf files on any drive, using Windows XP SP2-era suppression behavior. CIS L1 recommended when combined with NoDriveTypeAutoRun. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"DISABLED"