Problem with DEP!

Discussion in 'other software & services' started by ExtremeGamerBR, Mar 22, 2011.

Thread Status:
Not open for further replies.
  1. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    I have a problem here, after restoring my image I went to turn on DEP for all programs, but it is not possible:

    Sem t?tulo.jpg

    Does anyone know what is there?

    Thank you in advance.
     
  2. Meriadoc

    Meriadoc Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    2,642
    Location:
    Cymru
    The information at the bottom of the window is your answer.
     
  3. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
    Assuming you don't use EMET, you'll need to change the setting using bcdedit.

    The DEP setting is configured in the Boot Configuration Data. You can view this info with bcdedit (http://www.windows7home.net/how-to-use-bcdedit-in-windows-7/).

    The DEP setting is the "nx" value under Window Boot Loader. Yours is currently set to either AlwaysOn or AlwaysOff. Both these settings will disable the dialogue shown in the attached image.

    Note: You may have local language equivalents of AlwaysOn, AlwaysOff, OptOut, OptIn in the following commands.

    To set the options in the dialog you will need to enter ONE of these commands from an elevated command prompt:
    bcdedit /set nx OptIn​
    bcdedit /set nx OptOut​


    To turn DEP on for all programs:
    bcdedit /set nx AlwaysOn​


    Then reboot for it to take effect.
     
    Last edited: Mar 22, 2011
  4. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Thanks, is very good to know my DEP is enabled will not be appearing there.

    Has only a few more questions:

    1. why I can't change my DEP over there? Whenever I changed, because this "problem"?
    2. I did (bcdedit/set nx AlwaysOn) and despite my Windows to be in PT/BR appeared the message that it was all accomplished successfully. You can still encounter a problem?
    3. I'll have to restore the image later Yes I'll need to follow these steps to activate my DEP or it has already been enabled for all programs by default (though it doesn't appear there)?

    Thank you once again for the great help!
     
  5. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
    Sorry, I'm not quite following your English! (I know it is not your native language). To simplify:

    Turn DEP on for everything (with no exceptions):
    bcdedit /set nx AlwaysOn
    then reboot

    Turn DEP off completely:
    bcdedit /set nx AlwaysOff
    then reboot

    Turn DEP on for essential windows programs and services only (Avitar a DEP so para programmas...):
    bcdedit /set nx OptIn
    then reboot

    Turn DEP on for all programs and services except those I select (Avitar a DEP para todos os programmas...exceto os que eu selecionar):
    bcdedit /set nx OptOut
    then reboot
    then use the dialog you attached in the first post to add your exceptions using "Adicionar..."

    :thumb:
     
  6. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Sorry for my English, this is not my native language.

    Thank you for everything, the only question that I left was this:

    Why can't I change DEP settings for that path (Control Panel\System and Security/System ...)?

    Before I could change the settings for that path.

    Thanks again!
     
  7. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
    Have you used something that set DEP = AlwaysOn at some point in the past? Or have you used something to turn DEP off completely? Have you used EMET maybe?

    When you set DEP = AlwaysOn or AlwaysOff, the Control Panel\System and Security/System ... gets completely disabled by design.

    If you want to use Control Panel\System and Security/System ...
    bcdedit /set nx OptIn
    then reboot


    Control Panel\System and Security/System... can then be used.
     
  8. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Never used anything to enable or disable DEP, just installed the IE9. Does it have any connection?

    More thank you very much for your information, such as leave DEP AlwaysOn, whether it is enabled by Windows or bcdedit.exe.

    Thank you again!
     
  9. mantra

    mantra Registered Member

    Joined:
    Jan 25, 2005
    Posts:
    5,118
    what is dep?
    what's the gain to have the dep on for all my programs
    thanks

    sorry for my ignorance
     
  10. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
  11. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    3,873
  12. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    I've seen one of your security setups, at What is your current setup these days?, making reference to Microsoft EMET's tool. EMET does allow to enable/disable DEP.
     
  13. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
    Yes, I thought EMET had been used too. I mentioned it (subtly) a few posts back... ;)

    @ExtremeGamerBR
    https://www.wilderssecurity.com/showpost.php?p=1841191&postcount=14577
    https://www.wilderssecurity.com/showpost.php?p=1841194&postcount=14578

    These show you have/had Enhanced Mitigation Experience Toolkit (EMET) installed and set to "maximum settings". Maximum settings means DEP = AlwaysOn. DEP = AlwaysOn is the admin setting that disables the Control Panel\System and Security/System ... dialog.
     
  14. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Thanks to both!

    So it was like I said, I restored the snapshot before I installed the EMET (Left only the W7 + Drivers) i.e. before installing any program. But now I will stop using the EMET, want only DEP + SEHOP.
     
  15. sbseven

    sbseven Registered Member

    Joined:
    Jan 30, 2011
    Posts:
    140
    Last edited: Mar 24, 2011
Loading...
Thread Status:
Not open for further replies.