guide · static export
Security

Control AutoPlay and USB Device Behaviour

AutoPlay decides what happens when a phone, camera or stick is connected. On a shared or unknown device that decision should not be silent.

by@guidox updated:10/31/26 time:10 min level:Beginner tested on:Windows 11 24H2 works on:Windows 10, Windows 11 tools:Windows 11
TL;DR

Turn **Use AutoPlay for all media and devices** off, set each content type to **Take no action**, then review the per-device defaults. A USB stick should open in Explorer and nothing else.

Before you start

Requirements

  • Windows 11
  • Five minutes
Step by step

Instructions

01

Turn off the master switch

With the main toggle off, Windows asks instead of acting. Asking is the safe default for an unknown stick or a borrowed phone.

Settings > Bluetooth & devices > AutoPlay
02

Set each content type

Photos, video, music and mixed content each have their own action. Choosing take no action removes the last automatic behaviour.

03

Review the device list

The same page keeps an entry per connected device with its own default. An old phone set to import photos is why a folder fills after every connection.

tipThe list grows with every device. Removing entries for hardware you no longer use keeps the behaviour predictable.
04

Decide about USB mass storage

Removable storage is also governed by the policy for installing devices. A strict policy blocks unknown sticks from mounting at all.

gpedit.msc > Administrative Templates > System > Device Installation
⚠ warningBlocking removable storage also blocks cameras and card readers. Check what else is plugged in before applying it.
05

Keep Windows To Go and indexing in mind

A USB drive plugged in permanently is scanned by the search index and by Defender. Excluding it from indexing saves time on every reconnect.

06

Test with one stick

Plug in a USB stick and watch what happens. Nothing should start on its own; Explorer may open, which is expected.

Troubleshooting

Common issues

Photos still import on their own

A per-device entry in the AutoPlay list. Remove it.

The prompt appears every time

That is the intended behaviour with the master switch off.

The stick does not appear at all

A device installation policy or a failing port. Test another port first.

The setting reverts

A policy or a reset profile. Check with an administrator.

FAQ

Frequently asked

Does this stop autorun malware?

AutoPlay is not the old autorun. It reduces the risk, and Defender still scans connected drives.

Can I keep AutoPlay for one device?

Yes. Set the per-device action instead of the global one.

How to undo this

Switch the AutoPlay master toggle back on and restore the per-type actions you changed. The old behaviour returns immediately.

Changelog · 1 entry
  1. 2026-10-31
    First version
Interactive version: checklist, feedback, related guides →

Free · no account needed · tracks your progress