In our recommended configuration, the unknown autorun will be moved to quarantine until a human expert can verify it's non-malicious.
This can be customized to your organization's enforcement preference.