AutoRun and AutoPlay

AutoRun and AutoPlay were added as a convenience feature in WindowsXP and subsequent versions. It has been used for nefarious reasons, mainly to AutoStart malicious USB drives. Especially on servers it should be disabled. To do that through Group Policy:

AutoPlay

Computer Configuration > Administrative Templates > Windows Components > Autoplay Policies.

In the Details pane, double-click Turn off Autoplay

Click Enabled, and then select All drives in the Turn off Autoplay

AutoRun

Computer Configuration > Administrative Templates > System

In the Settings pane, right-click Turn off Autoplay, and then click Properties.

Click Enabled, and then select All drives in the Turn off Autoplay box