Posted 05/21/2009 at 11:05:54am

A comment earlier referenced a registry zap at cert.org. That is a FAR better approach than anything from Microsoft. For one thing, it does not involve installing softare. It also works the same on XP and Vista. Plus, its a much more complete solution. I wrote about this registry zap, which was first documented by Nick Brown here 

http://blogs.computerworld.com/the_best_way_to_disable_autorun_to_be_protected_from_infected_usb_flash_drives

No matter which solution you opt for, you can test how well it works with a sample autorun.inf file that I created. Read more here 

http://blogs.computerworld.com/test_your_defenses_against_malicious_usb_flash_drives