Skip to main content

Disable AutoPlay AutoRun Policy

Summary​

This script disables AutoPlay and AutoRun functionality at both system-level (HKLM) and user-level (HKCU) registry locations. It configures the following policies:

  • NoDriveTypeAutoRun: Set to 255 (0xFF) to disable AutoPlay for all drive types (USB drives, optical drives, etc.)
  • NoAutoplayfornonVolume: Set to 1 to disable AutoPlay for non-volume devices

These policies prevent automatic execution of files and programs when devices are connected, enhancing system security by reducing the attack surface for malware distribution and unauthorized code execution.

Sample Run​

Image

Dependencies​

Task Creation​

Script Details​

Step 1​

Navigate to Automation ➞ Tasks
step1

Step 2​

Create a new Script Editor style task by choosing the Script Editor option from the Add dropdown menu
step2

The New Script page will appear on clicking the Script Editor button:
step3

Step 3​

Fill in the following details in the Description section:

  • Name: Disable AutoPlay AutoRun Policy
  • Description: This script disables AutoPlay and AutoRun functionality at both system-level (HKLM) and user-level (HKCU) registry locations. It configures the following policies:
    • NoDriveTypeAutoRun: Set to 255 (0xFF) to disable AutoPlay for all drive types (USB drives, optical drives, etc.)
    • NoAutoplayfornonVolume: Set to 1 to disable AutoPlay for non-volume devices
    • These policies prevent automatic execution of files and programs when devices are connected, enhancing system security by reducing the attack surface for malware distribution and unauthorized code execution.
  • Category: custom

Image

Script Editor​

Click the Add Row button in the Script Editor section to start creating the script
AddRow

A blank function will appear:
BlankFunction

Row 1 Function: PowerShell Script​

Search and select the PowerShell Script function.

PowerShell Function Selected

The following function will pop up on the screen:
PowerShell Function Example

Paste in the following PowerShell script and set the Expected time of script execution in seconds to 600 seconds. Click the Save button.

PowerShell Script

Image

Row 2 Function: Script Log​

Add a new row by clicking the Add Row button.
Add Row

A blank function will appear.
Blank Function

Search and select the Script Log function.
Script Log Search

In the script log message, simply type %output% and click the Save button.
Script Log Save

Row 3 Logic: If/Then​

Click Add Logic and select If/Then

Image

Row 3a Condition: Output Contains​

In the IF part, enter Successfully configured all AutoPlay registry settings in the right box of the "Output Contains" part.

Image

Row 3b Function: Set Custom Field​

Add a new row by clicking on the Add Row button. Set Custom Field AutoPlay AutoRun Policies to Disabled.

Image

Save Task​

Click the Save button at the top-right corner of the screen to save the script.
SaveButton

Completed Task​

Image

Deployment​

This task has to be scheduled on the Disable AutoPlay AutoRun Policy group for auto deployment. The script can also be run manually if required.

  • Go to Automation > Tasks.
  • Search for Disable AutoPlay AutoRun Policy.
  • Then click on Schedule and provide the parameters detail as necessary for scheduling.

Image

Output​

  • Custom Field
  • Script output

Changelog​

2026-07-01​

  • Initial version of the document