On Fri, Mar 20, 2009 at 4:07 PM, N Parr <[email protected]> wrote: > So disabling autorun for all drives through GP does no good?
Well, it depends. Microsoft's released *two* patch sets so far to fix problems with it. The latest was MSKB 967715, released 24 Feb 2009. According to Microsoft, if you install that, and disable Autorun via GP, you'll be okay. But again, it's taken MSFT three or four tries to get to this point. At this point, I have no choice but to wonder what the heck is so hard about putting an "if" statement around the code. Perhaps the programmer(s) in the team responsible for this particular code are simply incompetent. Perhaps the code is not well-documented and hooks into the system in multiple places. Clearly, something very bogus is going on. Meanwhile, the INI redirection trick simply blocks Windows from reading the AUTORUN.INF file. It doesn't matter if Autorun is enabled or not; external media can no longer tell Windows what to do. -- Ben ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
