« Home | Very Surprised Sony Would Go This Far... » | Awesome HTTP File Transfer Server » | Open Office (The Free Microsoft Office Alternative) » | Dealing with Spyware » 

Monday, November 21, 2005 

Disable AutoPlay

AutoPlay is a feature that used to be nice to have, you just insert a CD (or other device) and it will automatically start a program or begin playing music. Given the current security landscape having this feature enabled may no longer be wise as many programs now don't play so nice anymore. (This is how the Sony rootkit gets installed automatically. See some of my previous posts if you don't know what I am talking about or just google "sony rootkit")

Many people may not consider is that it is very simple for someone to simply insert a USB key into a computer and things automatically start happening without any other action. This presents a very easy way for a hacker to steal corporate secrets or personal data from a desktop or laptop without ever touching a keyboard.

Here are some brief instructions for disabling this feature on Windows XP Pro. (If you are using a different OS a google search should quickly yield some instructions.)


  1. Click Start | Run | and type in gpedit.msc and click OK
  2. Expand Computer Configuration | Administrative Templates | System
  3. Find the setting for Turn off Autoplay and open the properties
  4. Select Enabled and Choose to Turn off Autoplay on: All drives
  5. Next expand User Configuration | Administrative Templates | System
  6. Repeat steps 3 and 4
It is a bummer that we have to do this to stay safe but this is just another shining example of the tradeoff between security and convenience.