Simply what I'm wondering, since I'm trying methods to harden a system without being too troublesome, is if tasks like installing and using software, etc. is not so seamless when having DEP on EVERYTHING. For example... let's say that I've just reinstalled my system, and I want to install Opera again. With DEP for everything, where this installation would obviously be included, and more importantly IE which I've to download it through - can I just install like normal, and in general with all the other common software like defragment tools, AM programs, using Seconfig XP for example, etc. etc.? OR, do I have to add every single thing that I want to install and use into exceptions? Is it like working with a default-deny approach?