Detections
Analytics
WN25-CC-000210 - Windows Server 2025 AutoPlay must be turned off for nonvolume devices.
Information
Allowing AutoPlay to execute may introduce malicious code to a system. AutoPlay begins reading from a drive as soon as media is inserted into the drive. As a result, the setup file of programs or music on audio media may start. This setting will disable AutoPlay for nonvolume devices, such as Media Transfer Protocol (MTP) devices.Solution
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> AutoPlay Policies >> Disallow Autoplay for nonvolume devices to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7(2), CAT|I, CCI|CCI-001764, Rule-ID|SV-278099r1181003_rule, STIG-ID|WN25-CC-000210, Vuln-ID|V-278099
Plugin: Windows
Control ID: adf78cde0c8c8b5eba2b2477f0fc78f4f49d6d8cadb13c61855729e8d76a4806