[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

249982

 
 

909

 
 

195748

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-99716-3

Platform: cpe:/o:microsoft:windows_server_2019Date: (C)2022-07-28   (M)2023-07-04



This policy setting allows you to turn off the Autoplay feature. Autoplay begins reading from a drive as soon as you insert media in the drive. As a result, the setup file of programs and the music on audio media start immediately. Prior to Windows XP SP2, Autoplay is disabled by default on removable drives, such as the floppy disk drive (but not the CD-ROM drive), and on network drives. Starting with Windows XP SP2, Autoplay is enabled for removable drives as well, including Zip drives and some USB mass storage devices. If you enable this policy setting, Autoplay is disabled on CD-ROM and removable media drives, or disabled on all drives. This policy setting disables Autoplay on additional types of drives. You cannot use this setting to enable Autoplay on drives on which it is disabled by default. If you disable or do not configure this policy setting, AutoPlay is enabled. Note: This policy setting appears in both the Computer Configuration and User Configuration folders. If the policy settings conflict, the policy setting in Computer Configuration takes precedence over the policy setting in User Configuration.


Parameter:

[All Drives/CD-ROM and removable media drives]


Technical Mechanism:

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\AutoPlay Policies!Turn off Autoplay (2) REG: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer!NoDriveTypeAutoRun

CCSS Severity:CCSS Metrics:
CCSS Score : 7.4Attack Vector: LOCAL
Exploit Score: 1.4Attack Complexity: HIGH
Impact Score: 5.9Privileges Required: NONE
Severity: HIGHUser Interaction: NONE
Vector: AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:HScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: HIGH
 Availability: HIGH
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:82020


OVAL    1
oval:org.secpod.oval:def:82020
XCCDF    3
xccdf_org.secpod_benchmark_general_Windows_2019
xccdf_org.secpod_benchmark_NIST_800_171_R2_Windows_2019
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_2019

© SecPod Technologies