Hi,

I believe this is the right document for you:

http://support.microsoft.com/kb/967715

Regards,

i want to solve it by symantec end point 

Sorry but in my opinion your point of view is not correct. Autorun.inf is just a text file, you cannot block it... it already cannot run. You have to block the O.S. feature that reads this file to run something else pointed by it.
SEP, from its point of view, can help you to stop that a malware spreads itself in your network by copying the autorun.inf in the drives and this is what you see.
You cannot ask to SEP to do the job of your O.S. and Active Directory.

Regards,

Ideas

1. disable the sep services "smc -stop" temporarily to allow the autorun.inf
2. highlights all the files that you want to copy then exclude the autorun.inf 

This should help you in implementing the policy.
Try testing it and see if this works.

How to prevent a virus from spreading using the "AutoRun" feature
http://service1.symantec.com/support/ent-security....

Preventing viruses using "autorun.inf" from spreading with "Application and Device Control" policies in Symantec Endpoint Protection (SEP) 11.x
http://service1.symantec.com/support/ent-security....

I think you can do away with the autorun feature.

SEP creates the policy by not allowing the user account to have read access to that file and copying the file is the combination of reading the file and writing it elsewhere.

Hello Sameh.
I hope this will help you.
open sep manager and go to application and device policy. edit your policy which you use than add new condition rule (file and folder access attempts. add autorun.inf in right side (apply to the following files and folders)
and go to actions tab and choice Block access.
this will block every access to autorun.inf
you cannot copy move etc. it.
if you want to blok it only flash drives edit file and folder definition and check box Only match files on the following device id type.
and write there usbstor*
thats all.
Have a nice day.

Dear All,
According with this link, http://service1.symantec.com/SUPPORT/ent-security....

I want to disable an autorun.inf on flash disk for my SEP client, but after do everything, like restarting, update policy, when try plug in flash disk on usb port the information always appear. Iwant to know why, ang how to solve.
I hope some one can explain why my policy not deploy to my SEP client.
Thank you.

Hello aulia
Please download this policy an use it. It must to work

https://www-secure.symantec.com/connect/downloads/block-autorun-downadup

Best Regards.
Fatih

:) no problem i hope it will help you

Regards
Fatih