Prevent code execution on CDs, removable media?

Not sure about the others, but usually holding the SHIFT key down while a CD loads, will stop it from autoloading.

Hi, thanks for replying.  I disabled Autorun already, but my mission is to prevent deliberate running of executables by untrusted users (preferably with as little disruption to normal PC usage as possible).  I took away execution perms for the user profile folders because they'd been installing software in there, but at present they can still do what they like from a CD or USB drive.  They have legitimate reasons for using removable media at times, so I don't want to disable them altogether, I just want to restrict all execution if possible.

That's harder, unless one of the programs that PowerIT posted will let you pick certian programs that can run, and stop everything else.

Not something I have had to get into before.

Sadly, this is consistent with the results of my own research.  Somebody asked this question a couple of years ago on annoyances.org, but never got an answer -- and that's all I found.

It's very surprising to me that there's seemingly no one who's addressed this issue.  I know that XP Home users are deprived of many things from the get-go, but in most cases someone has demonstrated a workaround or replacement for missing Pro functionality.

Oh well.  I'll take a closer look at the link above, but I don't think any of the apps there did quite what I was after.  If you don't mind I'd like to leave this open for a couple of days in case anyone else comes up with something.

>> ...I'd like to leave this open for a couple of days...

No problem.  : )

I came across a little something myself -- Exe Lockdown, http://www.horizondatasys.com/169602.ihtml

I'll need to trial it, but I found it via a page written by a guy on the same quest as me, and he lauded it as the best solution he'd found to the problem.
http://www.ranum.com/security/computer_security/editorials/antivirus/index.html

This sounds promising.  I don't like the 'scorched earth' nature of doing stuff like fully disabling Autorun on drives; I quite like CDs to run automatically, it's just having some control over *what* they run!

Will install it at home later, and report results ASAP.

Sorry for letting this one run on.

I'm very impressed with Exe Lockdown, it's exactly the approach that I was looking for, and I've recommended we license it at work.

Points to PowerIT for setting me in the right direction.