NoDriveTypeAutoRun - Disable for CD-ROM, but enable for removable drives...

[david.brightman@bigfoot.com]

Hi

We are using the USBDML product and trying to enable autorun for USB
devices only (i.e. disable for CD-ROM drives)
This is because some of our USB drives use the DTE_Privacy_Launcher,
which is autorun from one of the USB volumes to allow access to the
encrypted data on the other volume.

We are struggling to get Windows XP to differentiate between CD-ROM
and removable drives

The registry setting we seem to be having issues with is:
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
\NoDriveTypeAutoRun

We are struggling to find the 'component' bitmap values for Windows
XP...

There is a great article on the Windows 2000 value settings
http://www.microsoft.com/technet/pro...2.mspx?pf=true
but these seem to be different for Windows XP...

All we can find is
"Look at the value of the NoDriveTypeAutoRun entry. A value of 0xb5
turns off the AutoRun feature for CD-ROMs. To turn on the AutoRun
feature, right-click NoDriveTypeAutoRun, click Modify, type 91 in the
Value data box, select Hexadecimal, and then click OK."

We have googled, search resource kits, etc. but can't seem to find the
bitmap values for specific components under XP..
Does anyone happen to know these values?

Regards and thanks

David

[david.brightman@bigfoot.com]

It appears that the 'Types' piece can't differentiate between our USB
drives and the CD-ROM... Any setting for NoDriveTypeAutoRun with the
0x20 value in seems to disable autorun on the required USB devices.

We therefore decided to use the NoDriveAutoRun policy setting, which
we can target to specific drives for certain machine types (e.g. our
desktops have CD-ROM on D:, whereas laptops have dual partitions, so
CD-ROM is E:). We target these using Group Policy, and had to write a
Group Policy template to enable access to the required policy setting:
>>
; HKLMNoDriveAutoRun.adm Policy template
; David Brightman, May 2007

CLASS MACHINE
CATEGORY "Disable AutoRun for specified drive letters"
POLICY NoDriveAutoRun
EXPLAIN !!NoDriveAutoRunHelp
KEYNAME SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer
PART !!NoDriveAutoRunDropdown DROPDOWNLIST NOSORT REQUIRED
VALUENAME "NoDriveAutoRun"
ITEMLIST
NAME !!DOnly VALUE NUMERIC 8
NAME !!Eonly VALUE NUMERIC 16
NAME !!DandE VALUE NUMERIC 24
END ITEMLIST
END PART
END POLICY
END CATEGORY

[strings]
NoDriveAutoRunDropdown="Autoplay settings:"
DOnly="Restrict D: drive only"
EOnly="Restrict E: drive only"
DandE="Restrict both D: and E: drives"
NoDriveAutoRunHelp="NoDriveAutorun is stored as a REG_DWORD in which
each bit set disable autorun for the correspondig drive.\n\nThis
template only provides values of \nD: (0x00000008), \nE: (0x00000010)
and \nBoth D: and E: (0x00000018)"
<<

Hope this helps someone in the same boat!

All the best

David