Disable autorun functions from external media
The 'auto run' feature triggers, without user intervention, an executable code from an external storage device (optical disk, external hard disk, memory stick, flash card etc.).
This code, which is executed whenever the device is connected, is a major risk of infection for a work station. It is probably shared among several users/machines, greatly increasing its harmfulness.