Many programs and tools effect Windows run keys and services to automatically startup or load whenever Windows OS is booted. While this service can be a necessary convenience, it too can be problematic when accessed by a malicious program.
Run keys and Services are part of the registry, a hierarchical database housing settings that run the Windows operating system, its services and Windows-supported applications. There are seven Run Keys in total and five Service types. By default, Run keys are ignored in Safe Mode, although there are ways to get around this setting. So what is the difference between Run keys that startup or load programs and Services at boot and the Startup Folder used to also automatically run applications?
The operating system has a specific order in which it seeks and automatically run programs; the Windows Registry takes priority over the Startup Folder. The Windows Registry not only houses services that startup applications, but too houses services critical to running the operating system. If that is not what you mean then explain the issue with more details and why are you looking in the registry at Policies. Threats include any threat of suicide, violence, or harm to another.
Any content of an adult theme or inappropriate to a community web site. Any image, link, or discussion of nudity. Any behavior that is insulting, rude, vulgar, desecrating, or showing disrespect. Any behavior that appears to violate End user license agreements, including providing product keys or links to pirated software. Unsolicited bulk mail or bulk advertising. Any link to or advocacy of virus, spyware, malware, or phishing sites.
Any other inappropriate content or behavior as defined by the Terms of Use or Code of Conduct. Any image, link, or discussion related to child pornography, child nudity, or other child abuse or exploitation. Details required : characters remaining Cancel Submit 7 people found this reply helpful. Was this reply helpful?
The main purpose of Autorun is to provide a software response to hardware actions that you start on a computer. Autorun has the following features:. These features are typically called from removable media or from network shares. During AutoPlay, the Autorun. This file specifies which commands the system runs. Many companies use this functionality to start their installers. AutoPlay begins reading from a drive as soon as you insert media into the drive.
Therefore, the Setup file of programs and the music on audio media start immediately. If you enable the settings to disable AutoPlay the procedure to do this is described in this article , you can disable AutoPlay on a CD drive, on removable media drives, on all drives.
If the settings conflict, the setting in Computer Configuration takes precedence over the setting in User Configuration. Autorun commands are generally stored in Autorun. These commands enable applications to start, start installation programs, or start other routines. In versions of Windows that are earlier than Windows Vista, when media that contains an Autorun command is inserted, the system automatically executes the program without requiring user intervention.
Because code may be executed without user's knowledge or consent, users may want to disable this feature because of security concerns. The configuration settings that are described in this article give Administrators the ability to selectively or completely disable all Autorun capabilities for systems that run Windows , Windows XP, Windows Server , Windows Vista, and Windows Server systems. The default behavior in Windows Vista and Windows Server is to prompt the user whether an Autorun command is to be run.
Changes to these settings are described later in this article. An Administrator can completely disable Autorun commands or revert to the pre-Windows Vista behavior of automatically executing the Autorun command. If the feature is configured to disable Autorun capabilities, or if this policy is not configured, Windows Vista and Windows Server will continue to prompt the user whether the Autorun command is to be run.
Windows Vista-based and Windows Server based systems must have update Security bulletin MS installed to take advantage of the registry key settings that disable Autorun. Click Start , type Gpedit. If you are prompted for an administrator password or for confirmation, type the password, or click Allow. In the Details pane, double-click Turn off Autoplay. Click Enabled , and then select All drives in the Turn off Autoplay box to disable Autorun on all drives.
Click Enabled , and then select Do not execute any autorun commands in the Default Autorun behavior box to disable Autorun on all drives. Click Start , click Run , type Gpedit. In the Settings pane, right-click Turn off Autoplay , and then click Properties. Note In Windows , the policy setting is named Disable Autoplay. ImportantThis section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly.
Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:. In the Value data box, type 0xFF to disable all types of drives.
Or, to selectively disable specific drives, use a different value as described in the "How to selectively disable specific Autorun features" section. To selectively disable specific Autorun features, you must change the NoDriveTypeAutoRun entry in one of the following registry key subkeys:. The value of the NoDriveTypeAutoRun registry entry determines which drive or drives the Autorun functionality will be disabled for.
For example, if you want to disable Autorun for network drives only, you must set the value of NoDriveTypeAutoRun registry entry to 0x If you want to disable Autorun for multiple drives, you must add the corresponding hexadecimal values to the 0x10 value. For example, if you want to disable Autorun for removable drives and for network drives, you must add 0x4 and 0x10, which is the mathematical addition of 2 hexadecimal values, to determine the value to use.
These default values are listed in the following table. All the fixes in the current update for Windows XP and for Windows Server are included in the HonorAutorunSetting registry entry in the following subkey:. Note For Windows Server and Windows XP, all changes of this update are controlled by the HonorAutorunSetting registry entry so that you can revert to the previous configuration if it is required.
The registry key has a default value of 0x1. This value enables the functionality that is present in the current update.
0コメント