AutoRun/Autoplay on servers

Clarifications

I ALWAYS disable autoplay on servers.

Remember the SONY rootkit debacle? Just because somebody stuck in a music CD while they worked, autoplay installed a rootkit that nobody knew about.

On my server? No thanks.

At least if autoplay is disabled, I must make a deliberate effort, not just a mistake.

I would say disabling auto run would be more of an issue with users PCs, However you would be adding another thin layer of security by putting it on a server. I would say disable autorun.

It's quick, easy and there isn't a downside.

There are still people who have access to the servers and even if they are the IT Pro's they can still make a mistake and plug in something that they immediately know that they have done wrong. This always happens when there is a [b]Rush On[/b] and [i]normal[/i] processes are not followed because there is not the time to [u]waste.[/u]

Not to mention a Secure Server Room is great but I had one a while ago where the LAN was down and not working. The Office Manager insisted that the problem had to be elsewhere so I messed around all day only to find that a Cleaner had been in the Server Room after hours and broken a Patch lead [i]They probably caught it on something and dragged it out of the socket.[/i] But rather than tell anyone what had happened they went to a place in the building with some spare Patch Leads and replaced the one that they broke. Most likely trying to be helpful. ;)

Only problem which they would not have known about unless they had a cable tester was the one that they grabbed was wired as a Crossover not a straight Patch Lead. Took about 30 seconds to find the problem once I had got into the server room but the best part of the day to convince the Powers that Be there that i had to get in there.

Not to worry though as I get paid by the hour not the job. Not to mention that the staff there got very little done that day till I had the problem fixed. :D

Col

Thanks for the great comments and opinions.