Download and install this patch:
How to correct "disable Autorun registry key" enforcement in Windows
http://support.microsoft.com/kb/953252
Reboot after you install the patch. The patch will add the
HonorAutoRunSetting value in the registry.
You can then use the Group Policy object mentioned in the article or you
can edit the NoDriveTypeAutoRun value in the registry. You can merge
one of these to the registry:
To disable Autorun system wide (for all users) on all the drives:
================================================================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"HonorAutoRunSetting"=dword:00000001
"NoDriveTypeAutoRun"=dword:000000ff
=================================================================================
You may find it a bit annoying to have it disabled on the CD drives, to
disable Autorun on all but CD drives use this:
=================================================================================
Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer]
"HonorAutoRunSetting"=dword:00000001
"NoDriveTypeAutoRun"=dword:000000df
==================================================================================
These can be applied user specific at the same location in the HKCU key,
if entries exist at both keys the entries at the HKLM key will prevail.
You may need to reboot after you apply the registry edit.
John