1.136 WN10-CC-000185

Information

The default autorun behavior must be configured to prevent autorun commands.

GROUP ID: V-220828RULE ID: SV-220828r958804

Allowing autorun commands to execute may introduce malicious code to a system. Configuring this setting prevents autorun commands from executing.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> AutoPlay Policies >> 'Set the default behavior for AutoRun'

to 'Enabled:Do not execute any autorun commands'.

See Also

https://workbench.cisecurity.org/benchmarks/23869