Information
Autoplay starts to read from a drive as soon as you insert media in the drive, which causes the setup file for programs or audio media to start immediately. An attacker could use this feature to launch a program to damage the computer or data on the computer. Autoplay is disabled by default on some removable drive types, such as floppy disk and network drives, but not on CD-ROM drives.
Note: You cannot use this policy setting to enable Autoplay on computer drives in which it is disabled by default, such as floppy disk and network drives.
The recommended state for this setting is: Enabled: All drives.
Rationale:
An attacker could use this feature to launch a program to damage a client computer or data on the computer.
Solution
To establish the recommended configuration via GP, set the following UI path to Enabled: All drives:
Computer Configuration\Policies\Administrative Templates\Windows Components\AutoPlay Policies\Turn off Autoplay
Impact:
Autoplay will be disabled - users will have to manually launch setup or installation programs that are provided on removable media.
Default Value:
Disabled. (Autoplay is enabled.)