S 4.57 Deactivating automatic CD-ROM recognition

Initiation responsibility: IT Security Management

Implementation responsibility: Administrator, IT users

CD-ROMs can be recognised and read automatically under Windows 95 and Windows NT 4.0. This allows programs stored on CD-ROMs to be executed directly on the computer. Automatic CD-ROM recognition should be permanently deactivated under Windows 95 and Windows NT.

Under Windows 95, this is done by deactivating the attribute "Automatic recognition when changing" on the DEVICE MANAGER card under the control panel option SYSTEM PROPERTIES.

To permanently deactivate automatic CD-ROM recognition under Windows NT 4.0, set the "Autorun" entry under the \SYSTEM\CurrentControlSet\Services\Cdrom key in the registration to REG_WORD = 0in the HKEY_LOCAL_MACHINE group.

If automatic CD-ROM recognition is desired in general, it can be deactivated for an individual CD-ROM by pressing Shift key when inserting the CD-ROM.

Additional controls:

• Has automatic CD-ROM recognition been deactivated?

• Have users been informed as to how automatic CD-ROM recognition can be deactivated temporarily?