Autorun for XP Sp3 no longer working?

[luke77]

Has the autorun for USB devices for Xp Pro been deactivated with Sp3 ?

This worked until Sp2.

NoDriveTypeAutoRun = 91 (hex)

[Guest]

Check both...

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\

[luke77]

Check both...

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\policies\Explorer\

They are both set correctly.

Can you try it out on an Sp3 equipped machine?

Thanks.

[Ponch]

Maybe this is relevant ?

[luke77]

Maybe this is relevant ?

< Has the autorun for USB devices for Xp Pro been deactivated with Sp3 ?

So the answer is yes.

[Guest]

I'm not so sure on a yes. Did you install the WindowsXP-KB971029-x86-ENU.exe package from the "this is relevant" link? You would have had to do it manually since it wasn't offered via Windows Update or automatic updates. That update replaces shell32.dll and the recent .lnk vulnerability update (KB2286198) also contains shell32.dll. So the newer update might have make 971029 obsolete.

If you read KB967715(which should be automatically installed on all systems) and Advisory 967940 there is mention that no changes to autorun were made. It only fixes an enforcement issue.

Let me ask, does your USB have an autorun.inf or you just want the autoplay dialog to pop up?

Autoplay...

Edited August 27, 2010 by -X-

[Guest]

I just ran some experiments with different versions of shell32.dll. All gave the same results with the stock setting in NoDriveTypeAutoRun (0x91) -> Autoplay functions. Autorun.inf are NOT executed.

6.0.2900.5512 Stock SP3

6.0.2900.5622 KB967715

6.0.2900.6018 KB2286198

From KB967715 (I've highlighted some in green)

Default Behavior of Autorun and AutoPlay

Default behavior of AutoPlay on Windows XP-based systems

AutoPlay begins reading from a drive as soon as you insert media into the drive. Therefore, the Setup file of programs and the music on audio media start immediately. Before Windows XP SP2, AutoPlay was disabled by default on removable drives, such as the floppy disk drive (but not the CD drive), and on network drives. Starting with Windows XP SP2, AutoPlay is enabled for removable drives. This includes ZIP drives and some USB mass storage devices. If you enable the settings to disable AutoPlay (the procedure to do this is described in this article), you can disable AutoPlay on a CD drive, on removable media drives, on all drives.

Note This setting appears in both the Computer Configuration and User Configuration folders. If the settings conflict, the setting in Computer Configuration takes precedence over the setting in User Configuration.

Default behavior for Autorun

Autorun commands are generally stored in Autorun.inf files. These commands enable applications to start, start installation programs, or start other routines. In versions of Windows that are earlier than Windows Vista, when media that contains an Autorun command is inserted, the system automatically executes the program without requiring user intervention. Because code may be executed without user's knowledge or consent, users may want to disable this feature because of security concerns. The configuration settings that are described in this article give Administrators the ability to selectively or completely disable all Autorun capabilities for systems that run Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 systems.

The default behavior in Windows Vista and Windows Server 2008 is to prompt the user whether an Autorun command is to be run. Changes to these settings are described later in this article. An Administrator can completely disable Autorun commands or revert to the pre-Windows Vista behavior of automatically executing the Autorun command. If the feature is configured to disable Autorun capabilities, or if this policy is not configured, Windows Vista and Windows Server 2008 will continue to prompt the user whether the Autorun command is to be run.

So it appears that the bulletin is wrong and somewhere along the line they disabled autorun.inf. Without the need for KB971029.

[luke77]

I just ran some experiments with different versions of shell32.dll. All gave the same results with the stock setting in NoDriveTypeAutoRun (0x91) -> Autoplay functions. Autorun.inf are NOT executed.

6.0.2900.5512 Stock SP3

6.0.2900.5622 KB967715

6.0.2900.6018 KB2286198

From KB967715 (I've highlighted some in green)

Default Behavior of Autorun and AutoPlay

Default behavior of AutoPlay on Windows XP-based systems

AutoPlay begins reading from a drive as soon as you insert media into the drive. Therefore, the Setup file of programs and the music on audio media start immediately. Before Windows XP SP2, AutoPlay was disabled by default on removable drives, such as the floppy disk drive (but not the CD drive), and on network drives. Starting with Windows XP SP2, AutoPlay is enabled for removable drives. This includes ZIP drives and some USB mass storage devices. If you enable the settings to disable AutoPlay (the procedure to do this is described in this article), you can disable AutoPlay on a CD drive, on removable media drives, on all drives.

Note This setting appears in both the Computer Configuration and User Configuration folders. If the settings conflict, the setting in Computer Configuration takes precedence over the setting in User Configuration.

Default behavior for Autorun

Autorun commands are generally stored in Autorun.inf files. These commands enable applications to start, start installation programs, or start other routines. In versions of Windows that are earlier than Windows Vista, when media that contains an Autorun command is inserted, the system automatically executes the program without requiring user intervention. Because code may be executed without user's knowledge or consent, users may want to disable this feature because of security concerns. The configuration settings that are described in this article give Administrators the ability to selectively or completely disable all Autorun capabilities for systems that run Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and Windows Server 2008 systems.

The default behavior in Windows Vista and Windows Server 2008 is to prompt the user whether an Autorun command is to be run. Changes to these settings are described later in this article. An Administrator can completely disable Autorun commands or revert to the pre-Windows Vista behavior of automatically executing the Autorun command. If the feature is configured to disable Autorun capabilities, or if this policy is not configured, Windows Vista and Windows Server 2008 will continue to prompt the user whether the Autorun command is to be run.

So it appears that the bulletin is wrong and somewhere along the line they disabled autorun.inf. Without the need for KB971029.

That's what I have been saying since day 1.

Take care.