[KarlInOhio]

Since non-writable media such as CD-ROMs generally aren't avenues for malicious software propagation (because they're not writable) we felt it made sense to keep the current behavior around AutoPlay for these devices and make this change only for generic mass storage class devices.

Bzzzzzt! Wrong answer, thanks for playing anyway.

From the rootkit fiasco on Sony music CDs I consider all media suspect and do not allow any autoplay. The "trouble" of hitting play on a CD I want to listen to (as opposed to just ripping) isn't worth the risk of it trying to install something.

Sometimes I want to put in a software disk and look at the documentation on it or try to find a driver. I don't want it starting the setup program to start installing something.

[palmer]

Absolutely right. I routinely nuke all autoplay and autorun keys in the registry after winstalling windows. That breaks a few odds and ends, but saves me lots of grief in the long run.