I install Panda's USB and AutoRun Vaccine on every WinTel box I get my hands on:
http://research.pandasecurity.com/Pa...toRun-Vaccine/