Disable autorun function for external media
The 'auto run' feature triggers, without user intervention, an executable code from an external storage device (optical disk, external hard disk, memory stick, flash card etc.).
This code, which is executed whenever the device is connected, is a major risk of infection for a workstation. It is probably also shared among several users/machines, greatly increasing its harmfulness.