33
User and Remote Interface Security Measures
USB Interfaces
NOTE If the per-machine Registry key is present, its settings override those of the per-user
Registry key.
The Registry key that controls the per-machine AutoRun settings is:
HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explor
er\NoDriveTypeAutoRun
The Registry key that controls the per-user AutoRun settings is:
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explore
r\NoDriveTypeAutoRun
In the following discussions, we use the industry-standard abbreviation HKLM for the root key
HKEY_LOCAL_MACHINE, and the industry-standard abbreviation HKCU for the root key
HKEY_CURRENT_USER.
The DWORD value of either of these entries represents a set of single-bit flags. Each flag specifies the
AutoRun setting for a specific drive type, as shown in Figure 8-1. Setting a bit flag to 1 disables AutoRun for
that drive type.
Figure 8-1 AutoRun Flag Definitions for NoDriveTypeAutoRun Registry entry