Anyone here turning on DEP for all programs instead of just critical system file as is default with MS. How effective is DEP in preventing buffer overflow attacks etc.
http://blogs.zdnet.com/Ou/?p=234&tag=rbxccnbzd1 http://blogs.zdnet.com/hardware/?p=100&tag=rbxccnbzd1 These links indicate that it does offer the protection and speaks highly of it. They even go further to state that with full DEP on, you don't need any AV running.
I tried DEP with protection on for all programs (Opt Out) but went back to only the MS programs. Some programs wouldn't run with it on, which would be no big deal if a pop-up had notified me that DEP had prevented it from running so I could make an exception for that program. I never got a notification though so I just had to guess what the problem was with the program. Also, some programs automatically opt themselves out of DEP anyway. (You can make DEP always on instead of Opt Out if you want though through the boot.ini.)
Thanks..........so its a good idea to turn on DEP for all, I have done it and so far no issues apparently.