How to stop autorun on your usb devices
Nowdays, usb flash drive had completed replace floppy drive as media to infect computer. Somany local virus use this media to spread their new trojan or worm. As system administrator we must educate our user that this is not just media to save file or to exchange data but it also contains a program or applicaion that can infect your computer, steal your data, delete your important document and etc.
There are many ways to avoid this :
- sysadmin, please disable autorun 1. Click Start, click Run, type regedit in the Open box, and then press ENTER. 2. Locate and click the following registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\CDRom 3. To disable automatically running CD-ROMs, change the Autorun value to 0 (zero). To enable automatically running CD-ROMs, change the Autorun value to 1. 4. Restart your compute
- Disable autorun form group policy, please see example : CLASS MACHINE CATEGORY !!category CATEGORY !!categoryname POLICY !!policynameusb KEYNAME “SYSTEM\CurrentControlSet\Services\USBSTOR” EXPLAIN !!explaintextusb PART !!labeltextusb DROPDOWNLIST REQUIRED VALUENAME “Start” ITEMLIST NAME !!Disabled VALUE NUMERIC 3 DEFAULT NAME !!Enabled VALUE NUMERIC 4 END ITEMLIST END PART END POLICY POLICY !!policynamecd KEYNAME “SYSTEM\CurrentControlSet\Services\Cdrom” EXPLAIN !!explaintextcd PART !!labeltextcd DROPDOWNLIST REQUIREDVALUENAME “Start” ITEMLIST NAME !!Disabled VALUE NUMERIC 1 DEFAULT NAME !!Enabled VALUE NUMERIC 4 END ITEMLIST END PART END POLICY POLICY !!policynameflpy KEYNAME “SYSTEM\CurrentControlSet\Services\Flpydisk” EXPLAIN !!explaintextflpy PART !!labeltextflpy DROPDOWNLIST REQUIRED VALUENAME “Start” ITEMLIST NAME !!Disabled VALUE NUMERIC 3 DEFAULT NAME !!Enabled VALUE NUMERIC 4 END ITEMLIST END PART END POLICY POLICY !!policynamels120 KEYNAME “SYSTEM\CurrentControlSet\Services\Sfloppy” EXPLAIN !!explaintextls120 PART !!labeltextls120 DROPDOWNLIST REQUIRED VALUENAME “Start” ITEMLIST NAME !!Disabled VALUE NUMERIC 3 DEFAULT NAME !!Enabled VALUE NUMERIC 4 END ITEMLIST END PART END POLICY END CATEGORY END CATEGORY [strings] category=”Custom Policy Settings” categoryname=”Restrict Drives” policynameusb=”Disable USB” policynamecd=”Disable CD-ROM” policynameflpy=”Disable Floppy” policynamels120=”Disable High Capacity Floppy” explaintextusb=”Disables the computers USB ports by disabling the usbstor.sys driver” explaintextcd=”Disables the computers CD-ROM Drive by disabling the cdrom.sys driver” explaintextflpy=”Disables the computers Floppy Drive by disabling the flpydisk.sys driver” explaintextls120=”Disables the computers High Capacity Floppy Drive by disabling the sfloppy.sys driver” labeltextusb=”Disable USB Ports” labeltextcd=”Disable CD-ROM Drive” labeltextflpy=”Disable Floppy Drive” labeltextls120=”Disable High Capacity Floppy Drive” Enabled=”Enabled” Disabled=”Disabled” Back to the top Back to the top
- hold on shift key while you’re insering flashdisk or cdrom
Posted by gurulugu 