We are running Active Directory on Windows Server 2003. I would like to use Group Policy to turn off AutoRun and AutoPlay on our computers. The policy would be applied to an Organizational Unit containing user accounts.
In a Group Policy, I have tried going to Computer Configuration\Administrati
ve Templates\System and setting the value for "Turn off Autoplay" to Enabled for all drives. This did not seem to keep Autoplay from working, and it did not stop Autorun from running Setup.exe on a CD inserted into the CD-ROM.
I have a couple of registry edits that will do what I want, but I'm not sure how to use Group Policy to edit the registry. We want to use Group Policy so that if someone changes the registry to enable Autorun, it will be turned off again the next time they log on.
Any help would be appreciated. Thanks!
I forgot to mention that most of our PCs are running Windows XP.
These are the two registry changes I would like to make, unless there is another way to use Group Policy to accomplish the same thing:
1. HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\IniFileMapping
Add new String Value: Autorun.inf, value = @SYS:DoesNotExist
Set value of AutoRun to 0.