Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Disable AutoRun XP - DS Job and VBscript

Updated: 23 Jul 2009
jamesmax's picture
+3 3 Votes
Login to vote

Several months ago, I decided to improve the security on our desktops. One thing that must be done is disable autorun. If you don't disable autorun, many viruses, Trojans, and worms can be spread - including the conficker virus. Disabling the autorun in the GPO hasn't done it correctly in the past. Windows did some updates to fix that if you disable autorun in the group policies. However, I just add this registry entry to disable autorun entirely. USB flash drives cannot execute the autorun.inf file if you have this registry setting. The txt file needs the extension renamed to .bin. Happy virus hunting.

This is the what is in the bin file (You could also copy and paste the section below to a vbs file and run it on the computer):

'vbscript

Set WshShell = WScript.CreateObject("WScript.Shell")

WshShell.RegWrite "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping\Autorun.inf\", "@SYS:DoesNotExist", "REG_SZ"