Group Policy
However, Group Policy would be the accepted method of disabling AutoRun on an entire Windows domain.