All client computers on your company network run Windows 7. The computers are members of a
Windows Server 2008 Active Directory Domain Services domain. Malicious software is spreading
automatically from removable drives. You need to ensure that malicious software does not
automatically run on the computers. What should you do?

A.
Disable the Windows Installer by using Domain Group Policy.

B.
Disable the Autoplay function by using Domain Group Policy.

C.
Disable the ActiveX installation policy by using Domain Group Policy.

D.
Prevent the installation of unsigned drivers by using Domain Group Policy.

Explanation:
http://support.microsoft.com/kb/962007