How to disable autorun.ini

How to use group policy to disable "double click action" caused by
autorun.ini in WinXP for removal/fixed drives since there are many virus/worm
that cannot be detected by Mcafee?

Found via the internet, most likely can solve my problem is to change the
registry as below.

Change the Value data to 12 (Decimal) for DWOED Value of NoDriveTypeAutoRun
under following key: (I would only allow the user to enjoy the feature by
CD-ROM)

HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer

It works just only when each time the logon user try to restart the
explorer.exe in task manager.

How can I make it as default or any help from group policy in OU?

Reference.
http://en.wikipedia.org/wiki/Autorun