I'd purchase cheap USB devices and instead of relying on autorun which, as you mentioned, has been disabled in most all cases, make the contents sufficiently interesting for people to warrant a click.
Princess_Laya_Gives_Han_A_Solo.swf
stock_portfolio.html
personal/finances.xls
private/divorce_settlement.doc
If you can't get someone to click on any of these, they probably wouldn't have inserted the USB drive in the first place.
USB Phishing
in Questions
Posted
So what was the macro you used?