CIS Microsoft Windows 10 Enterprise RTM (Release 1507) Benchmark

18.9.8 AutoPlay Policies
This section contains recommendations for AutoPlay policies.
18.9.8.1 (L1) Set 'Disallow Autoplay for non-volume devices' to 'Enabled'
(Scored)
Profile Applicability:
Level 1
Level 1 + BitLocker
Description:
This policy setting disallows AutoPlay for MTP devices like cameras or phones.
The recommended state for this setting is: Enabled.
Rationale:
An attacker could use this feature to launch a program to damage a client computer or data
on the computer.
Audit:
Navigate to the UI Path articulated in the Remediation section and confirm it is set as
prescribed. This group policy setting is backed by the following registry location:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer:NoAutoplayfornonVolume
Remediation:
To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer Configuration\Policies\Administrative Templates\Windows Components\AutoPlay
Policies\Disallow Autoplay for non-volume devices
Impact:
If you enable this policy setting, AutoPlay is not allowed for MTP devices like cameras or
phones.
560 | P a g e