Server 2003: autostart/autorun in policy

Hello folks

I'm trying to set up a policy that will prevent any software in a USB
memory stick/pen from autostarting when the pen is connected to the
PC. I don't want to block these pens, just stop any autostart.

Anyone knows if there's a way to do this in the policies?

 

Hello JR,

Have a look here:
http://support.microsoft.com/kb/967715/

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello folks
>
> I'm trying to set up a policy that will prevent any software in a USB
> memory stick/pen from autostarting when the pen is connected to the
> PC. I don't want to block these pens, just stop any autostart.
>
> Anyone knows if there's a way to do this in the policies?
>

 

On Tue, 7 Apr 2009 11:11:22 +0000 (UTC), Meinolf Weber [MVP-DS]
<meiweb(nospam)@gmx.de> wrote:

>Hello JR,
>
>Have a look here:
>http://support.microsoft.com/kb/967715/
>
>Best regards
>

I know this one, but it also disables CD. I was trying to disable
autorun on USB only...

 

Hello JR,

If you check the part "How to selectively disable specific Autorun features
" in the article you have all options available to do it with the registry.
You can deploy regkeys also with scripts via GPO or you can write your own
..adm.

See here about .adm:
http://blogs.technet.com/grouppolic...alues-using-custom-adm-files-part-1-of-2.aspx

http://blogs.technet.com/grouppolic...ault-value-of-a-registry-key-part-1-of-2.aspx

http://technet.microsoft.com/en-us/library/cc738443.aspx

http://support.microsoft.com/kb/225087/en-us

Registry keys:
http://support.microsoft.com/kb/310516

http://www.microsoft.com/technet/scriptcenter/resources/qanda ov06/hey1116.mspx

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> On Tue, 7 Apr 2009 11:11:22 +0000 (UTC), Meinolf Weber [MVP-DS]
> <meiweb(nospam)@gmx.de> wrote:
>
>> Hello JR,
>>
>> Have a look here:
>> http://support.microsoft.com/kb/967715/
>> Best regards
>>
> I know this one, but it also disables CD. I was trying to disable
> autorun on USB only...
>

 

On Tue, 7 Apr 2009 18:47:09 +0000 (UTC), Meinolf Weber [MVP-DS]
<meiweb(nospam)@gmx.de> wrote:

>Hello JR,
>
>If you check the part "How to selectively disable specific Autorun features
>" in the article you have all options available to do it with the registry.
>You can deploy regkeys also with scripts via GPO or you can write your own
>.adm.
>
>See here about .adm:
>http://blogs.technet.com/grouppolic...alues-using-custom-adm-files-part-1-of-2.aspx
>
>http://blogs.technet.com/grouppolic...ault-value-of-a-registry-key-part-1-of-2.aspx
>
>http://technet.microsoft.com/en-us/library/cc738443.aspx
>
>http://support.microsoft.com/kb/225087/en-us
>
>Registry keys:
>http://support.microsoft.com/kb/310516
>
>http://www.microsoft.com/technet/scriptcenter/resources/qanda ov06/hey1116.mspx
>
>Best regards
>
>Meinolf Weber

Thanks

 

Hello JR,

If you have problems with self creating .adm's, choose this NG:
microsoft.public.windows.group_policy

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> On Tue, 7 Apr 2009 18:47:09 +0000 (UTC), Meinolf Weber [MVP-DS]
> <meiweb(nospam)@gmx.de> wrote:
>
>> Hello JR,
>>
>> If you check the part "How to selectively disable specific Autorun
>> features " in the article you have all options available to do it
>> with the registry. You can deploy regkeys also with scripts via GPO
>> or you can write your own .adm.
>>
>> See here about .adm:
>> http://blogs.technet.com/grouppolicy/archive/2007/09/21/setting-defau
>> lt-registry-key-values-using-custom-adm-files-part-1-of-2.aspx
>> http://blogs.technet.com/grouppolicy/archive/2007/10/11/custom-adm-fo
>> r-setting-the-default-value-of-a-registry-key-part-1-of-2.aspx
>>
>> http://technet.microsoft.com/en-us/library/cc738443.aspx
>>
>> http://support.microsoft.com/kb/225087/en-us
>>
>> Registry keys:
>> http://support.microsoft.com/kb/310516
>> http://www.microsoft.com/technet/scriptcenter/resources/qanda ov06/h
>> ey1116.mspx
>>
>> Best regards
>>
>> Meinolf Weber
>>
> Thanks
>