On GameSpot: Courtney Love to sue over Guitar Hero 5
BNET Business Network:
BNET
TechRepublic
ZDNet
TalkBack 1 of 71:
Next »
Another option for some versions of Windows: SRP
Software Restriction Policy is another option for some versions of Windows, such as WinXP Professional, Vista Business/Ultimate/Enterprise, and Windows Server 2003/2008. It doesn't get much discussion, which is unfortunate since it can prevent AutoPlay attacks and the use of unauthorized portable apps. Being part of Group Policy, it's pretty easy to deploy, enforce and adjust as needed. Just something to think about...

Tom McFadden
MVP, Windows Desktop Experience
Posted by: mechBgon   Posted on: 12/01/08 You are currently: a Guest | Members login | Terms of Use
Reply to Story Reply to Message

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

Another option for some versions of Windows: SRP  mechBgon | 12/01/08
Or you can use this  mdemuth | 12/01/08
Because with all things related to Microsoft  akulkis | 12/01/08
Realism  Anton Philidor | 12/01/08
That will NOT work. Autorun needs to be disabled, for ALL removable media.  DonnieBoy | 12/01/08
Hmm  tikigawd | 12/01/08
No, it is not the same thing. If the OS selects a media player for a DVD,  DonnieBoy | 12/01/08
I'm sorry, who then decides its "arbitrary code"?  TG2 | 12/02/08
You do not even understand the basics. The OS chosing the media player from  DonnieBoy | 12/02/08
Do you know what "arbitrary" means? confused  seanferd | 12/04/08
This guy does  AzuMao | 12/05/08
The AV vs malware battle continues  Anton Philidor | 12/01/08
Excuse me, the OS chosing a media player is not very dangerous. But,  DonnieBoy | 12/01/08
Here is the message in Gnome ...  MisterMiester | 12/01/08
Yes and you get a prompt like that in Windows XP SP2+ (NT)  logicearth@... | 12/02/08
Another example of MS not caring about all the problems. Autorun on  DonnieBoy | 12/01/08
MS security contributions  Richard Flude | 12/01/08
How does signing help?  rpmyers1 | 12/01/08
You don't get the purpose of signing  CobraA1 | 12/02/08
You don't get my point  rpmyers1 | 12/02/08
The purpose is not flagging bad executables  Bob.Kerns | 01/06/09
Just turn off AutoRun  forrestgump2000@... | 12/01/08
Well, the fact that MS still has auto run at all speaks volumes about how  DonnieBoy | 12/01/08
Agreed-yet give me an idiot with a computer and an executable in an email..  BanjoPaterson | 12/01/08
Still not a panacea  rpmyers1 | 12/01/08
Your anger is misguided  AzuMao | 12/01/08
And, that says volumes about Windows users and their idea of security.  DonnieBoy | 12/01/08
It is OK  rpmyers1 | 12/01/08
Being able to do something dangerous, vs not being able to even if you want  AzuMao | 12/03/08
Killing Autorun; 3 ways  cquirke1 | 01/06/09
RE: Is there no end to the AutoRun madness?  jimfrost | 12/01/08
RE: Is there no end to the AutoRun madness?  alicia@... | 12/01/08
RE: Is there no end to the AutoRun madness?  marcialbf | 12/01/08
RE: AutoRun  PaladinIII | 12/01/08
Would an executable "white list" work?  PaladinIII | 12/01/08
Short answer: No  rpmyers1 | 12/01/08
Formatting before use ... how?  daboochmeister | 12/01/08
RE: Is there no end to the AutoRun madness?  ragingpanda | 12/01/08
Leave the computer on  GiMMeABreak | 12/03/08
Users are stupid, until you educate them  terry flores | 12/01/08
WHAT???  Timewellwasted | 12/01/08
Users are stupid, until you educate them  Vinny_z | 12/01/08
Funny thing is that if they email client is Outlook XP or better....  JoeMama_z | 12/01/08
Oh really?  akulkis | 12/01/08
while that was pretty unreadable....  JoeMama_z | 12/02/08
Are you serious?  hasta la Vista, bah-bie | 12/02/08
My post was out of context.....  JoeMama_z | 12/02/08
As soon as you click on them they are (NT)  hasta la Vista, bah-bie | 12/03/08
At least require it be code signed.  Bob.Kerns | 12/01/08
code signing doesn't cover the issue at all  TG2 | 12/02/08
See post: Agreed -- I didn't say it was adequate...  Bob.Kerns | 01/05/09
Creator???? Bad Hacker???  Bob.Kerns | 01/05/09
RE: Is there no end to the AutoRun madness?  Pharaoh36706 | 12/01/08
WOW! So glad I don't do Windows.  LindseD@... | 12/02/08
there is an end to the AutoRun madness?  anonymous_dan | 12/03/08
RE: Is there no end to the AutoRun madness?  kumar.narain@... | 12/11/08
Keep in mind  AzuMao | 12/12/08
Time for public executions  DaveMorris | 12/15/08
Nice stereotype there..  AzuMao | 12/16/08
Signed AND trusted signer  georgeou | 12/15/08
I'm with you, but...  Bob.Kerns | 01/05/09
Agreed -- I didn't say it was adequate...  Bob.Kerns | 01/05/09
I should add...  Bob.Kerns | 01/05/09
This was reply to: code signing doesn't cover the issue at all  Bob.Kerns | 01/05/09
3G modems that rely on \Autorun.inf  cquirke1 | 01/06/09
RE: Is there no end to the AutoRun madness?  MooMooMooMooMoo | 01/21/09
SOLUTIONS: Terrific TalkBack on AutoRun madness!  alanmcrae@... | 01/21/09
Auto run or no autorun, infection leads to infection  ron@... | 04/29/09
No.  AzuMao | 05/02/09
You've gotta stop somewhere!  FiOS-Dave | 04/30/09
Would we be having this discussion if you all stopped?  MetaPhaze | 09/07/09

What do you think?

SponsoredWhite Papers, Webcasts, and Downloads

Enterprise Applications

  • Check out some of the easiest and most powerful ways to boost productivity while saving money on your application infrastructure. See ZDNet's comprehensive Enterprise Application resource center, now!
  • New Online Dashboard
  • Read about top issues IT decision-makers face every day, plus get cost effective solutions to real life IT problems. Oracle Topline