Edytuj

Policy CSP - Autoplay

  • Artykuł

Tip

This CSP contains ADMX-backed policies which require a special SyncML format to enable or disable. You must specify the data type in the SyncML as <Format>chr</Format>. For details, see Understanding ADMX-backed policies.

The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.

DisallowAutoplayForNonVolumeDevices

Scope Editions Applicable OS
✅ Device
✅ User		 ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC		 ✅ Windows 10, version 1703 [10.0.15063] and later 
./User/Vendor/MSFT/Policy/Config/Autoplay/DisallowAutoplayForNonVolumeDevices

./Device/Vendor/MSFT/Policy/Config/Autoplay/DisallowAutoplayForNonVolumeDevices

This policy setting disallows AutoPlay for MTP devices like cameras or phones.

  • If you enable this policy setting, AutoPlay isn't allowed for MTP devices like cameras or phones.

  • If you disable or don't configure this policy setting, AutoPlay is enabled for non-volume devices.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name NoAutoplayfornonVolume
Friendly Name Disallow Autoplay for non-volume devices
Location Computer and User Configuration
Path Windows Components > AutoPlay Policies
Registry Key Name Software\Policies\Microsoft\Windows\Explorer
Registry Value Name NoAutoplayfornonVolume
ADMX File Name AutoPlay.admx

SetDefaultAutoRunBehavior

Scope Editions Applicable OS
✅ Device
✅ User		 ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC		 ✅ Windows 10, version 1703 [10.0.15063] and later 
./User/Vendor/MSFT/Policy/Config/Autoplay/SetDefaultAutoRunBehavior

./Device/Vendor/MSFT/Policy/Config/Autoplay/SetDefaultAutoRunBehavior

This policy setting sets the default behavior for Autorun commands.

Autorun commands are generally stored in autorun.inf files. They often launch the installation program or other routines.

Prior to Windows Vista, when media containing an autorun command is inserted, the system will automatically execute the program without user intervention.

This creates a major security concern as code may be executed without user's knowledge. The default behavior starting with Windows Vista is to prompt the user whether autorun command is to be run. The autorun command is represented as a handler in the Autoplay dialog.

  • If you enable this policy setting, an Administrator can change the default Windows Vista or later behavior for autorun to:

a) Completely disable autorun commands, or b) Revert back to pre-Windows Vista behavior of automatically executing the autorun command.

  • If you disable or not configure this policy setting, Windows Vista or later will prompt the user whether autorun command is to be run.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name NoAutorun
Friendly Name Set the default behavior for AutoRun
Location Computer and User Configuration
Path Windows Components > AutoPlay Policies
Registry Key Name Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
ADMX File Name AutoPlay.admx

TurnOffAutoPlay

Scope Editions Applicable OS
✅ Device
✅ User		 ✅ Pro
✅ Enterprise
✅ Education
✅ Windows SE
✅ IoT Enterprise / IoT Enterprise LTSC		 ✅ Windows 10, version 1703 [10.0.15063] and later 
./User/Vendor/MSFT/Policy/Config/Autoplay/TurnOffAutoPlay

./Device/Vendor/MSFT/Policy/Config/Autoplay/TurnOffAutoPlay

This policy setting allows you to turn off the Autoplay feature.

Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately.

Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives.

Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices.

  • If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives.

This policy setting disables Autoplay on additional types of drives. You can't use this setting to enable Autoplay on drives on which it's disabled by default.

  • If you disable or don't configure this policy setting, AutoPlay is enabled.

Note

This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get, Replace

Tip

This is an ADMX-backed policy and requires SyncML format for configuration. For an example of SyncML format, refer to Enabling a policy.

ADMX mapping:

Name Value
Name Autorun
Friendly Name Turn off Autoplay
Location Computer and User Configuration
Path Windows Components > AutoPlay Policies
Registry Key Name Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
ADMX File Name AutoPlay.admx

Policy configuration service provider