>

Disable USB AutoRun via the Registry

Turn off automatic execution for removable drives so inserted USB sticks never launch anything.

WindowsregistryusbsecurityMedium risk
Run the reg add command setting NoDriveTypeAutoRun to 255 in an admin Command Prompt; log off and back on to apply.

01Command

Command
$ reg add "HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 255 /f

02What it does

AutoRun was designed for convenience but became the infection vector of countless USB-borne worms, which is why modern Windows already limits it. Setting NoDriveTypeAutoRun to 255 disables it for every drive type, so plugging in a USB stick only opens Explorer or nothing at all. The default value 145 restores normal behavior.

03Risk

RiskMedium risk
RequirementsRun Command Prompt as administrator. Value 255 (0xFF) disables AutoRun on all drive types; 145 is the Windows default.
!Warning: This does not stop you from manually double-clicking a malicious file — treat unknown USB sticks as untrusted regardless.

04Undo

Undo
$ reg add "HKLMSOFTWAREMicrosoftWindowsCurrentVersionPoliciesExplorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 145 /f

05Sources

Last verified: 2026-09-18 · Category: Security & Privacy

06Related solutions

Fix 'scripts is disabled on this system' with Set-ExecutionPolicy
WindowsTerminaldevelopersecurity

Understand PowerShell's execution policy scopes and set the one that lets you run your own local scripts without gutting the security model.

Medium risk ✓ 2026-09-17
Take ownership of a file or folder with takeown and icacls
WindowsFilessystemsecurity

Two-step command sequence that makes you the owner of a locked file tree and grants yourself full control — the standard fix for 'Access is denied' on old profiles and OS reinstall leftovers.

High risk ✓ 2026-09-17
Verify File Hashes with certutil -hashfile
Windowshashcmdsecurity

Built-in Windows command to compute MD5, SHA1 or SHA-256 hashes of any file.

Low risk ✓ 2026-09-17